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I.  IIUfifiSfillOM 

An  Air  Force  which  has  no  automated  processing  capa¬ 
bility  can  not  acconplish  its  tasks,  in  a  modern  sense.  The 
lack  of  an  automated  data  processing  capability  will  bring 
too  many  problems.  The  dynamic  nature  of  the  system  can  not 
be  supported  by  an  old  fashion  mechanical  or  semi-automated 
information  gathering,  storing,  and  retrieving  methods. 

New  system  will  need  a  powerful  processing  capability 
and  a  communication  media  to  exchange  information  between 
the  geographically  separated  subparts.  Establishment  of  a 
computer  system  will  need  a  huge  investment  in  terms  of  both 
hardware  and  software  requirements.  But  the  system  can  pay 
back  itself  by  icproving  -  the  speed,  reliability,  security 
and  maintability  of  the  processes. 

First  section  addresses  the  current  system  structure  and 
the  requirements  for  the  new  system.  Requirements  are  not 
discussed  in  detail.  Instead  they  presents  general  system 
requirements. 

Second  section  divides  the  system  into  modules.  Since 
the  modularization  is  an  important  design  methodology,  we 
also  mentioned  it  in  this  part.  Thus,  now  it  is  easier  to 
implement  the  system  module  by  module,  in  a  structured  way. 
lie  also  set  the  interfaces  among  these  modules. 

In  third  section  we  introduced  a  database  model.  And  an 
example  of  this  model  is  presented. 

Section  four  discusses  the  networking  issues.  Since  our 
system  needs  a  network  to  interconnect  the  independent 
hosts,  we  presented  international  standards  organization* s 
seven  layer  architecture  model.  Also,  cryptographic  methods 
are  discussed  in  this  section. 
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Section  five  addresses  a  minicomputer  selection  method¬ 
ology  rather  than  system’s  cost  analysis.  Since  system  cost 
can  depend  cn  the  maiket  conditions,  we  preferred  to  present 
this  methodology.  Thus,  it  can  be  used  with  different 
computer  products  under  different  market  conditions.  And  an 
example  of  the  cost  evaluation  is  presented. 


II.  BEQCiaEBElIS  AMALISIS 


A.  BEFI1ITIOI  OF  THI  PBOBLEH 

Ad  air  force  which  is  aade  up  of  two  tactic  air  forces, 
an  airlift  consand,  cne  training  coaaand  three  supply,  aain- 
tenance  centers  has  no  autoaated  processing  capabilities. 
The  prcblea  is  to  autcaate  daily  aechanical  data  retrieving, 
storing  and  updating  the  jobs.  Thus  efficiency,  reliability 
and  speed  of  the  systea  will  greatly  be  increased. The  actual 
stateaent  of  the  problea  is  design  of  an  inforaation  systea 
for  an  air  force  coaiand. 

B.  SISTEB  ELEHEITS 

As  we  aentioned  earlier,  this  air  force  is  an  hypothet¬ 
ical  cne  which  has  no  strategic  aissions.  Tactic  forces  are 
considered  in  the  saac  structure.  Each  of  thea  has  four  air 
bases  and  its  own  early  warning  report  center.  And  again 
each  base  is  considered  to  be  in  the  sane  structure.  Each 
base  has  two  sguadrons  one  aaterial  coaaand  and  one  general 
support  ccaaand.  At  the  saae  tine  each  tactic  force  has  its 
own  supply, caintenance  center.  There  is  only  one  airlift 
coaaand  which  is  directly  connected  to  the  air  forces 
coaaand.  Air  training  coaaand  is  also  directly  connected  to 
air  forces  coaaand.  This  siaplified  general  structure  of  the 
systea  is  aore  convenient  to  be  designed  easily.  Further 
extensions  can  be  aade  easily  after  coapleting  the  design  of 
this  acre  general  systea.  In  fact,  expandability  is  the  one 
of  the  systea  design  aspects.  The  detailed  hierarchy  chart 
of  the  systea  is  shown  in  figure  2.1  . 

Early  warning  centers  have  their  own  CRP's  (control 
report  post).  They  control  the  activities  of  the  friendly 
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and  enemy  forces  in  their  responsibility  region.  Especially 
they  need  accurate  and  fast  information  system,  to  inform 
the  friendly  forces  at  right  time.  Also  supply  and  mainte¬ 
nance  centers  are  the  backbones  of  the  system.  The  response 
for  a  particular  demand  sometime  may  take  a  long  time.  To 
decrease  this  time,  local  processing  power  is  not  suffi¬ 
cient.  They  also  need  a  computer  communication  with  the 
other  centers.  This  system  especially  will  payback  itself 
in  these  two  areas. 

C.  BOB  COBBEIT  STSTEB  BOSKS? 

Before  considering  system  requirements  we  should  first 
check  the  current  system  environment.  Air  operation  center 
claims  daily  status  reports  from  the  TAP  and  airlift 
command.  These  reports  are  related  with  the  current  opera¬ 
tional  readiness  of  troop's.  Early  warning  centers  send  these 
reports  to  air  operation  center  of  the  command.  These 
reports  are  different  from  the  others  in  a  sense  that  they 
have  to  be  updated  immediately.  In  EMC  environment  each 
report  post  has  to  send  status  information  to  its  related 
EBC .  All  troops,  have  to  report  all  emergency  situations 
immediately  to  the  upper  level  commands.  The  general  struc¬ 
ture  of  the  headquarters  are  the  same  except  the  size  of 
them.  Each  headquarters  has  four  main  parts.  They  are  oper¬ 
ation,  training,  intelligence,  logistics  and  personnel.  Be 
will  consider  this  structure  in  the  same  way  when  we  imple¬ 
ment  thee.  Rain  responsibilities  of  these  systems  can  be 
summarized  in  the  following  way. 

i.  gfifimiaji  &ad  stun  jpg 

This  part  of  the  system  is  responsible  for  the  oper¬ 
ational  readiness.  Administration  of  operations  and  exer¬ 
cises  are  the  main  responsibility  of  them.  Training  the 
personnel  for  operational  readiness  is  another  important 


assignment  of  this  part.  Planning  the  operations  and 
exercises  are  also  tbeir  responsibility. 

2.  gejC£3Pfl&l 

This  part  of  the  systea  is  responsible  to  keep  all 
personnel  records:  pronotions,  health  status,  training  and 
criainal  background,  assignments,  military  home  status.  Also 
this  part  plans  the  future  personnel  policy.  It  determines 
the  training  needs  for  new  type  of  jobs  and  offers  new 
courses  related  with  the  new  systems. 

3  •  l£t  iHigenge 

This  part  of  the  system  related  with  the  enemy 
status.  They  plan  the  intelligence  needs  and  provide  them. 
After  providing  the  needs,  this  intelligence  is  evaluated 
and  distributed  to  related  troops.  They  also  interrogate  the 
pilots  who  are  completed  the  mission.  Preparing  the 
necessary  maps  and  target  files  is  also  their 
responsibility. 

4 .  logistics 

This  part  of  the  system  is  responsible  for  providing 
the  every  kind  of  material  and  stocking,  distributing  them 
in  an  intelligent  way.  Maintenance  activities  are  also  their 
responsibility.  To  accomplish  these  activities  it  has  three 
regicnal  supply  and  maintenance  center.  Logistic  planning  is 
the  mcst  important  responsibility  of  this  part. 

These  four  main  part  have  their  own  subdivisions  to 
accomplish  their  task  effectively.  These  subparts  are: 
flyer,  navigator,  maintenance,  supply,  civil  engineering, 
electronic  weapons,  ammunition,  communication,  transporta¬ 
tion,  early  warning,  anti-aircraft  and  missile,  and 
comptroller. 
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la  this  system  environment,  connections  among  troops  and 
adainistratioa  are  sc  frustrating.  Re  need  to  eliminate 
waste  tiae  which  is  spent  on  deaand,  supply,  record  keeping, 
processing,  reports.  First  we  have  to  speed  up  these  activi¬ 
ties  and  integrate  then  in  a  central  authority  which  manages 
all  these  activities  instantly.  Also  lower  management  needs 
its  cwn  processing  power  to  keep  his  own  activities, 
records.  By  providing  automated  processing  system,  lower 
level  management  can  easily  communicate  with  upper  levels  or 
vice  versa.  To  provide  something  from  upper  management,  low 
level  managers  need  not  to  go  laterally,  in  system  hier¬ 
archy.  They  should  have  as  little  responsibilities  as 
possible.  The  only  level  that  they  have  to  communicate  with 
it  is  one  higher  level  management.  By  the  way  higher  level 
managers  can  easily  control  what  is  going  on  in  lower 
levels.  Daily  reports  have  to  be  generated  in  a  way  that  is 
accurate  and  fast,  flessage  traffic  in  both  direction  have  to 
be  speeded  up.  Pezsonnel  do  not  have  to  be  too  much  busy 
because  of  the  daily  routine  jobs.  The  number  of  personnel 
who  is  in  charge  of  doing  these  jobs  have  to  be  decreased. 
At  the  sane  time  we  should  forget  the  papers  which  are  in 
useless  fora  in  terms  of  processing.  Office  automation  is 
the  one  of  the  important  issues. 

By  providing  processing  power  to  lower  level  management, 
they  can  manage  the  jobs  independently.  Thus  they  can 
utilize  all  the  sources  efficiently,  no  overhead  for  higher 
level  management.  Quick  response  for  a  demand  is  the  essen¬ 
tial  point  for  efficiency  of  operation.  Personnel  need  more 
tiae  for  doing  real  jobs  rather  than  doing  daily  routine 
bookkeeping  things.  If  we  would  like  to  define  requirements 
more  precisely,  we  can  summarize  them  in  the  following  way: 
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1.  GejiialiSfl  Of  Reports 

These  reports  are  divided  into  two  groups.  One  of 
thee  is  periodicals.  These  reports  are  sent  daily*  monthly 
or  seai  annually.  They  contain  personnel  and  material  status 
informations.  Other  group  is  the  nonperiodicals  which  are 
almost  related  with  the  emergency  situations  and  special 
cases.  They  are  usually  urgent  and  have  priority. 

2.  fisassai  Bgfl&JsssBifia 

At  different  levels  there  is  a  big  necessity  for 
bookkeeping  activities.  These  are  very  large  jobs  and  need 
freguent  processing.  In  lechanical  processing  most  of  the 
time  is  spent  to  store  and  retrieve  these  information* 
rather  then  processing  then.  Storing  them  in  mechanical  way 

needs  too  much  space  and  personnel  time. 

#■ 

3.  Mes^aggs  Agd  Orders 

Sending  and  receiving  messages  are  done  by  the  means 
of  teletypewriters.  even  in  this  environment  this  autona> 
tion  does  not  satisfy  the  system  constraints. They  are  time 
consuming  too.  Some  messages  or  orders  have  priority  and 
secrecy.  Storing  and  retrieving  these  messages  are  also  time 
consuming.  Nowadays  message  traffic  is  over  the  standard 
level.  Electronic  nailing  is  the  one  of  the  aspects  of  the 
new  system. 

Sghedalgg 

There  are  different  kind  of  scheduling  requirements 
in  different  units.  All  these  scheduling  activities  are 
done  by  manpower.  As  a  result  of  these  schedules  are  not 
productive*  economical*  even  sometimes  they  are  big 
clashes.  Lack  of  the  local  computer  processing  power* 
results  in  a  time  consuming*  unproductive  scheduling. 


Especially  airlift  command  needs  different  scheduling 
algorithms  and  its  own  processing  power. 

5 .  Personnel  Records 

Personnel  records  consist  so  much  information  about 
personnel.  Decisions  on  personnel  are  made  according  to 
these  records.  Storing,  retrieving,  searching  of  these 
records  are  very  hard  and  time  consuming.  Promotions, 
assignments  are  also  made  according  to  these  records.  Bach 
year  all  records  are  searched  all  together.  By  mechanical 
way  all  these  activities  take  a  year  long.  Payroll  system 
has  been  already  set  up.  For  other  tasks  there  is  a  need  for 
database  system  to  prccess  all  these  activities. 

6 .  ISieliigense  Recaps 

these  records  like  personnel  records  are  continu¬ 
ously  changed  and  kept  in  files.  Be  would  like  to  access 
these  records  frequently.  It  will  be  very  useful  to  keep 
them  in  a  database  in  terms  of  storing,  retrieving, 
updating,  distributing  them  easily. 

logisliS  &££££ds 

Probably  the  largest  manpower  is  consumed  by  keeping 
the  logistic  records  there  are  millions  of  items  in  inven¬ 
tory  of  the  air  forces.  Stock  control  is  an  important  issue. 
Keeping  the  names  and  part  no's  of  these  items  and  location 
of  them  is  the  most  time  consuming  problem.  We  need  a  very 
big  processing  capability  and  a  database.  Also  the  nature  of 
the  problem  requires  a  computer  network  which  is  established 
among  the  supply  centers  and  the  related  commands.  The 
slowest  part  of  the  entire  system  is  the  logistic  system. 
Also  supply  centers  seed  a  computer  processing  power  and  a 
database  to  keep  their  records. 
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Air  forces  need  a  coaputer  network  to  accomplish  its 
task  in  a  aodern  sense.  Since  the  subparts  of  the  systems 
are  related  with  each  other,  coaputer  network  is  the  one  of 
its  requirements.  All  the  jobs  are  in  the  fora  of  storing 
retrieving,  updating  or  processing  of  information.  Thus  we 
need  a  well  designed  database  system  to  handle  these  jobs. 


IZZ.  £!£*£  2S£  SYSTEM  DOBM  JHJO  MODOLES 


1.  CE1TBA1  DATA,DISTBIBOTED  Oil! 

Before  considering  the  issue  of  how  we  can  freak  the 
systea  down  into  modules,  we  should  first  look  at  the  issue 
of  what  should  be  centralized  and  what  should  be  decentral* 
ized.  The  answer  to  this  guestion  will  determine  the  nodular 
structure  of  the  system.  In  the  first  chapter  we  have  given 
the  hierarchical  structure  of  the  systea.  Systea  components 
are  geographically  distributed.  According  to  system  hier¬ 
archy  and  the  systea  requirements  we  should  answer  the  gues¬ 
tion  above.  The  DP  or  DDP  strategy  should  start  with  a  top 
aanageaent  view  of  where(  the  corporation  is  going  and  how 
its  direction  might  be  changed  by  networks,  database  usage, 
aicrocoaputers  and  DCP.  The  iapleaention  of  data  processing 
takes  one  of  two  forms:  designed  or  ad  hoc.  In  ad  hoc 
systems  user  groups  do  their  own  things  hoping  for  no 
external  interference.  Designed  systems  need  to  begin  with  a 
corporate  strategy.  This  strategy  will  keep  us  away  from  a 
dozen  side  effects  of  ad  hoc  implementation.  when  we  were 
talking  about  the  needs  of  the  system;  we  have  said  that  the 
local  processing  power  is  the  one  of  the  iaportant  issues. In 
distributed  environaent,the  users  can  develop  their  own 
prograas  and  now  may  have  powerful  compilers,  report  genera¬ 
tors  and  other  software  on  a  central  systea  to  help  them. 
While  most  of  their  prograas  use  the  local  aachine,  they  are 
not  restricted  to  using  only  that.  They  can  develop  applica¬ 
tions  which  soaetiaes  need  the  power  of  large  remote  aachine 
or  data  which  are  maintained  centrally.  Centralized  stan¬ 
dardization  can  be  welcomed  by  decentralized  groups  if  it 
has  the  appearance  of  being  a  service  to  them,  as  in  the 
case  of  a  corporate  data  dictionary. 


Distributing  processing  can  thus  facilitate  local 
autoncmy,  initiative  and  responsibility  without  obliterating 
the  advantages  of  centralized  data  planning  and  data-base 
software.  The  user  depart ments  are  freed  from  nest  of  the 
frustratiens  of  being  tied  to  an  overburdened  DP  department. 
They  can  achieve  much  quicker  implementation  of  their 
requirements  and  tailor  them  exactly  to  their  needs  .  They 
can  quickly  modify  their  programs  to  adjust  the  local  situ¬ 
ations.  The  rigidities  of  the  centralized  scheduling  are 
avoided.  The  centralized  authorities  on  the  other  hand  have 
not  lest  the  ability  to  manage  the  overall  systen*s  growth 
in  the  corporation.  There  is  a  delicate  balance  between  the 
degree  cf  local  autonomy  and  the  degree  of  centralized 
control.  Re  can  separate  the  local  and  the  central 
responsibilities  in  the  following  way: 

i 

1 .  Centralized  Besponsibilities 

1.  definition  of  local  and  central  responsibili¬ 
ties  (design  considerations) 

2.  Choice  of  network  standards 

3.  Choice  of  data  descriptions  language 

4.  Choice  of  data-base  software 

5.  Database  administration  services  including  the 

coordinated  design  of  the  data 

6.  Maintenance  of  a  system  data  dictionary 

7.  Selection  and  design  of  applications  to  serve 
multiple  locations 

8.  Selection  of  applications  to  be  transferred 
between  locations 


9.  Review  of  docu mentation  of  applications  trans¬ 
ferred  between  locations 

10.  Guidance  cn  modularization  needed  to  facilitate 
application  transfer 

11.  Technical  consulting  services 

12.  System  security  design  and  administration 

13.  Design  of  system  auditing  controls  and  facili¬ 
ties 


2 .  Decentralized  Bespp nsibilit ies 

1.  Local  application  development 

2.  Design  of  locally  used  files 

r. 

3.  Design  of  subschemas  which  relate  to  a  remote 
database  in  conjunction  with  a  central  database 
administrator 

4.  Selection  cf  equipment  within  the  constraints  of 
corporate  recommendations 

5.  Development  and  documentation  of  applications 
intended  for  transfer  to  other  locations 

6.  Modifications  of  applications  received  from 
other  locations 

7.  Liaison  with  centralized  authorities  on  schema 
development  and  standardization  of  data  items 

8.  Liaison  with  other  locations  on  applications 
developed  for  common  use 

In  our  system  design, distributed  is  the  one  of  the 
design  issues.  So  we  should  also  give  some  objectives  which 
justify  ouz  design  ccnsiderations. 


22 


3.  Types  Of  Objectives  Foe  Distributed  Data 

1.  A  highly  distributed  user  community 

2.  Lov  cost.  Data  replication  is  cheaper  than 
long-distance  transmission  for  the  traffic 
voluaes.  This  argument  is  stronger  for  countries 
which  do  not  have  low-cost  data  networks. 

3.  A  need  for  high  availability  the  data  remain 
available  when  one  or  more  copies  of  it  are 
inaccessible  or  long  distance  transmission  links 
are  down. 

4.  The  military  need  for  surviveability.  Data 
remain  available  after  destruction  of  multiple 
no  de  s. 

t . 

5.  Fast  response  time.  Access  to  a  local  data  is 
faster  than  access  to  a  distant  highly  shared 
data. 

6.  Tunability.  Data  can  be  moved  to  different 

nodes  as  usage  patterns  change.  Data  heavily 
used  in  cne  geographic  region  can  be  stored  near 
that  region. 

7.  Traffic  voluaes  are  too  high  for  a  single 
storage  system. 

A  major  task  for  more  corporations  over  the  ten 
years  ahead  is  to  decide  what  databases  they  need,  where 
they  are  best  located,  what  data  should  be  stored  in  them 
and  how  they  should  be  organized.  The  amount  of  data  stored 
will  increase  drastically,  and  the  ways  the  data  are  orga¬ 
nized  will  be  fundamentally  changed  to  increase  their 
usefulness.  Data  bases  will  become  the  foundation  stone  of 
much  corporate  data  processing.  One  of  the  most  difficult 


tricks  that  ve  have  tc  learn  is  how  to  introduce  automation 
without  introducing  rigidity.  Database  techniques  are  an 
important  part  of  the  answer.  A  database  is  intended  tc  make 
data  independent  of  the  prograss  that  use  them.  Old  applica¬ 
tion  programs  do  not  have  to  he  rewritten  when  changes  are 
made  to  data  structures,  data  layout  or  the  physical  devices 
on  which  data  are  stored.  The  data  can  be  easily  reorganized 
or  their  structure  added.  Now  with  the  distributed  systems 
we  have  a  new  requirements.  If  the  data  are  distributed 
existing  programs  should  not  have  to  be  rewritten.  In  other 
words  *e  want  the  data-base  system  itself  to  be  distributed. 

B.  SPLIT  TBE  DATA 

Data  can  be  divided  within  a  distributed  system  as  fellows: 

1.  Geographical 

2.  Type  of  data 

3.  Type  of  usage 

1.  GsographicaX  Division 

If  data  originate  and  are  used  in  given  geographical  areas 
then  geographical  division  may  make  sense.  This  type  of 
division  can; 

1.  reduce  the  cost 

2.  Increase  the  system  availability 

3.  Increase  the  accessability  of  the  data 

4.  Give  faster  response  time 

5.  Permit  local  users  to  maintain  control  over 
their  own  data 

On  the  other  hand  it  may; 


1.  Increase  the  total  system  cost 

2.  Become  cciplex 


Be  unsecure 


4.  Be  very  difficult  to  integrate  later 


2-  Division  By  lype  Of  Data 

In  large  organization  computer  systems  perform 
different  sets  of  functions.  They  may  be  entirely  different 
independent  systems.  However ,  telecommunications  links  are 
found  between  them,  or  one  terminal  may  have  access  to 
multiple  systems.  The  data  are  divided  by  data  type.  The 
advantages  cf  this  type  division  can  be; 

1.  Local  implementation  and  control  are  desirable 


2.  Simplicity.  To  put  all  applications  on  one 
machine  can  be  highly  complex.  It  is  often 
easier  to  implement  smaller  systems. 


3.  Politics.  Local  management  wants  control  of  its 
own  data  processing. 

4.  Security.  The  data  could  be  reconstructed  at  the 
other  center  from  log  tapes  and  file  dumps. 

The  major  danger  of  of  separate  data  systems  arises 
when  data  are  designed  in  incompatible  ways.  Hany  corpora¬ 
tions,  government  departments  and  military  organizations 
have  staggering  proliferation  of  incompatible  data  and  a 
growing  need  to  merge  data  or  develop  applications  which  use 
data  from  separate  systems.  In  most  cases  the  desired 
conversion  or  migration  is  never  performed. 

3-  Division  By  Typ?  Of  pspae 

Sometimes  the  distinction  is  made  according  to  the 
usage  of  the  system.  If  it  is  a  production  or  an  operation 
system,  it  should  be  designed  for  a  precisely  defined  set  of 
operations.  The  exact  nature  of  the  system  is  known  in 


advance.  In  an  information  system  the  nature  of  the  queries 
is  not  known  in  detail.  The  data  structures  are  designed  to 
handle  spontaneous  gueries  which  may  differ  widely  in  their 
nature  and  may  require  the  data  to  be  searched  in  various 
ways.  The  value  of  a  good  information  system  is  sometimes 
higher  than  that  of  an  operations  system  using  the  same 
data,  because  it  enables  management  to  make  better 
decisions. 

Cur  system  will  be  geographically  divided, because  of 
the  nature  of  the  system  needs  this  type  of  division.  After 
these  considerations,  now  we  can  apply  all  of  them  in  our 
system.  First  of  all  we  should  determine  the  system 
configuration. 

C.  SISTEH  COIFIGOBillOl 

f 

Since  our  system  has  a  hierarchical  structure  and  the  nature 
of  the  ccmmunica tion  is  vertical  we  should  choose  a  configu¬ 
ration  which  satisfies  our  goals  which  are  discussed  in 
chapter  2.  Hierarchical  configuration  is  most  appropriate 
one  to  satisfy  our  goals.  The  data  in  lower-level  machines 
are  closely  related  to  those  in  the  higher- level  machines. 
They  are  often  a  subset  of  a  higher-level  data  used  for 
applications.  The  master  copy  of  the  data  may  be  kept  by  the 
higher-level  machine.  When  a  change  is  made  to  the  data  in 
the  lower  level  machine,  this  change  must  be  passed  up  to 
the  higher  level  machine  sometimes  immediately,  sometimes 
later  in  updating  cycle.  This  is  the  dependent  hierarchical 
data  configuration  which  has  been  shown  in  Figure  3. 1  .  In 
our  implementation  sometimes  higher-level  management  need 
not  to  have  all  the  data  reside  in  lower-level  machine,  or 
lower  level  machines  may  store  the  some  of  the  data  which 
are  in  the  higher  machine  and  also  have  some  which  are  its 
own  they  are  never  passed  upwards.  The  bulky  data  are  never 
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Figure  3. 1  Hierarchical  Dependent  Data  Configuration 


needed  by  the  higher-level  parts.  For  instance  Air  Force 
Ccanand  cnly  need  to  have  the  nuaber  of  operational  cr  unop- 
eraticnal  aircrafts.  It  nay  not  need  to  know  what  kind  of 
problems  that  these  aircrafts  have.  The  detailed  data 
related  to  these  aircrafts  night  be  kept  in  base’s  database. 
On  the  other  hand,  personnel  files  are  kept  by  both  of  the 
Coonand  and  base  itself. 


D.  HUITIPLE  COPIES  CP  SATE 


In  oar  implementation  soae  components  will  have  the  saae 
data.  In  this  case  care  is  needed  in  planning  the  updates 
and  the  recovery  frca  failures.  Restart  and  recovery  can 
present  probleas  if  the  database  are  being  continuously 
updated.  The  aost  easily  controllable  approach  is  to  have 
single  copy  of  the  data.  The  other  replicated  are  regarded 
as  secondary  to  the  aaster  copy.  The  system  is  designed  so 
that  if  the  aaster  copy  is  destroyed  it  can  be 
reconstructed. 

Different  data  each  has  a  single  master  copy  but  these 
could  be  stored  in  different  locations.  In  our  systea  imple¬ 
mentation  Air  Force  Ccaaand  will  have  the  some  parts  of  the 
database  of  TAPs,  Airlift  Coaaand,  and  Training  Coaaand. 
And  TAFs  also  will  have  .the  soae  parts  of  the  database  of 
the  bases.  If  anyone  of  the  AFCOB's  or  TAF's  database  is 
destroyed,  integrity  can  be  provided  froa  the  copies  of  data 
which  are  at  lower-level  command's  databases.  This  applica¬ 
tion  is  neither  exactly  aaster  copy  approach  nor  freely 
distributed  approach  but  the  coabination  of  then.  This 
application  will  bring  us  the  benefits  of  the  both 
approaches.  The  aost  iaportant  one  is  the  storage  saving. 
By  storing  the  only  soae  part  of  the  data  of  lower  level 
coaaand* s  databases  will  save  us  a  lot  of  aeaory  space.  And 
by  providing  the  recovery  procedures  will  provide  the 
database  integrity. 

1.  Easter  Cypy  Updating 

Bhen  we  use  the  aaster  copy  approach  database  aay  or 
aay  not  be  updated  in  real  tiae.  There  are  two  approaches. 

1.  All  transactions  iaaediately  update  the  aaster. 
The  aaster  issues  new  copies  of  changed  records 
to  other  processes  periodically. 


2.  Transactions  update  a  nonaaster  file.  All  trans¬ 
actions  are  saved  for  periodic  updating  of  the 
aaster.  fihen  the  aaster  is  updated  new  copies  of 
changed  records  are  sent  to  other  processors 
which  use  thea. 

After  a  failure  of  part  of  the  systea  resynchroniza¬ 
tion  is  achieved  by  issuing  new  copies  of  any  changed 
records  in  the  aaster  to  the  processors  which  keep  thea.  If 
the  aaster  itself  fails  then  copies  of  the  transactions  aust 
be  kept  until  it  recovers.  So  that  it  can  be  updated  and 
then  in  turn  issue  copies  of  the  changed  records  to  other 
processors  which  keep  them. 

In  cur  iipleaentation  the  only  real  tine  updates  are 
the  Status  Reports  updates  and  EH  updates.  All  the  ether 
updates  are  saved  and  then  they  periodically  update  the 
aaster. 

Now  we  can  break  the  systea  down  into  nodules 
according  to  considerations  presented  so  far.  AFCOH  has  its 
own  nainfraae  conputer.  It  also  includes  the  data  which  are 
in  T AF's,  Supply  and  aainte nance  center's.  Airlift  Connand's 
and  Air  Training  Coaaand's  database.  TAFs  hold  soae  data 
which  ccae  froa  the  bases.  Base  is  the  saallest  nodule 
which  gathers  infornation  froa  its  subparts.  TAFs  also  hold 
the  sene  data  which  ccae  froa  the  its  own  supply  and  nainte- 
nance  center.  The  acst  inportant  data  TAFs  have,  is  the 
early  warning  reports.  Those  data  need  to  be  updated  in 
real  tine,  and  have  to  be  sent  to  coaaand's  database.  Eaily 
routine  status  reports  are  sent  to  TAFs  database.  Those 
reports  are  also  updated  in  real  tine,  since  they  are  very 
saall  and  inportant  in  terns  of  operational  decision  aaking. 
All  other  kind  of  data  can  be  updated  periodically. 

In  systea  hierarchy  lower-level  nodules  can  reach  to 
top  level  via  the  interaediate  level  nodules.  They  can't 


access  to  top  level  independently.  TAF 1  and  Base  1  are 
located  at  the  sane  place.  TAF  2  and  Base  5  are  located  at 
the  suae  place.  One  of  the  supply  and  eaintenance  center  is 
located  at  the  AFCOM's  location.  These  are  ieportant  only  in 
teres  of  hardware  reguireaents.  In  base  environaent  subparts 
have  terminals  which  provide  coaeunication  with  base's  nini 
coaputer.  TAFs,  ATCOB,  ALCOH  and  bases  have  their  own  einis. 
In  general  each  level  coaaunicate  with  one  level  higher.  For 
instance  bases  first  have  to  update  the  TAF's  database. Then 
gathered  updates  can  be  transaitted  to  Coaaand's  database  by 
TAFs.  This  will  reduce  the  coaaunication  costs.  In  urgent 
situations  a  nodule  can  iaaediately  update  the  both 
Coaaand's  and  TAF's  database.  For  instance  early  warning 
reports  and  status  reports  can  be  updated  parallelly.  our 
systea  has  the  saae  structure  which  has  been  shown  in  Figure 
3.1  .  This  kind  of  'configuration  will  eliainate  the 
coaplexity.  If  every  aodule  of  the  systea  interacts  with 
every  other  the  nuaber  of  interactions  grows  at  approxi- 
aately  the  square  of  the  nuaber  of  aodules  M(H-1)/2  inter* 
action  for  n  aodules.  It  has  been  observed  that  as  systea 
grows  they  becoae  acre  coaplex  and  harder  to  aanage.  The 
coaplexity  and  cost  following  roughly  a  square  lav.  The 
optiaua  solution  can  be  found  at  a  point  in  which  econoaies 
of  scale  and  coaplexity  are  balanced.  [Bef.  1  ]  In  this 
envircnaent  the  systea  aodularization  can  be  deaonstrated  in 
Figure  3.2  . 

In  this  iapleaenta tion  we  considered  two  things. 
First  of  all  geographically  close  nodes  connected  to 
centers.  And  those  connected  nodes  are  also  hierarchically 
related  with  each  other.  Thus  this  iapleaentation  is  aore 
appropriate  than  the  ethers,  like  pure  logical  connection  or 
pure  geographical  connection.  Also  it  is  convenient  to  be 
aodified  easily  whenever  we  need  to  change  the  systea 
configuraticn. 


If.  0!2*BA£I  ASSIGN 


A.  ISTBCDUCTIOH 

A  database  is  the  interface  between  the  people  and 
Machines.  The  nature  of  these  coaponents  is  utterly 
different.  The  difficulty  is  to  develop  a  database  which 
■eets  the  needs  of  tbe  people  who  will  use  it,  a;.;  which  is 
practical  in  teras  of  technology  and  hardware.  Since  the 
database  is  the  bridge  between  huaans  on  one  side  and  hard* 
ware  on  the  other,  it  Bust  aatch  the  characteristics  of 
each. 

A  database  supports  a  coaaunity  of  users  whose  needs 
partly  overlap,  partly  diverge,  and  partly  conflict. 
Unfortunately  there  is  no  algoritha  for  database  design. 
Database  design  is  bcth  art  and  science.  Dealing  with  people 
understanding  what  they  want  today,  predicting  what  they 
will  want  tcaorrow,  differentiating  between  individual  needs 
and  coaaunity  needs  and  aaking  appropriate  design  tradeoffs 
are  artistic  tasks. 

Database  design  is  a  two-phased  process.  First  we 
exaaine  the  users* s  reguireaents  and  build  a  conceptual 
database  structure  that  is  a  model  of  an  organization.  This 
phase  of  database  design  is  often  called  logical  database 
design.  Once  the  logical  design  of  the  database  is 
coapleted,  this  design  is  foraulated  in  teras  of  a  partic¬ 
ular  EBBS  •  Usually  coaproaises  aust  be  Bade  .  For  ezaaple 
the  EBBS  aay  not  be  able  to  express  relationships  precisely 
as  the  users  see  tbea.  The  process  of  foraulating  the 
logical  design  in  terns  of  DBAS  facilities  is  called 
physical  database  design. 
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We  have  examined  the  user  requirements  in  Chapter  1.  In 
this  Chapter  we  will  fcuiid  a  conceptual  database  structure, 
namely  the  logical  database  design. 

G.  SUBTIT  CF  PB0BISI1T  DATABASE  HODELS 

Figure  4.1,  portrays  six  common  and  useful  database 
models.  Hodels  on  the  left-hand  side  of  this  figure  tend  to 
be  oriented  toward  machines  and  machine  specifications.  Two 
categories  of  database  models  have  been  omitted.  These 
categories  are  the  hierarchical  and  network  data  models. A 
model  is  hierarchical  if  its  only  data  structure  a  hierarchy 
(tree).  A  model  is  network  if  its  data  structures  are  bcth 
trees  and  simple  networks.  Only  complex  networks  need  to  be 
decomposed  before  they  are  represented.  The  hierarchical 
model  has  become  toe  narrow  and  the  network  data  model  too 
broad. 


Human 

(logical) 

machine 

(physical) 

Semantic 
data  model 
(SDH) 

Entity 
relationship 
model  (I-R) 

Relational 

data 

model 

CODASTL 

DBTG 

model 

DBHS 

specific 

model 

A  MSI/  X3/  SPABC 

Figure  4.1  Classification  Of  Database  Hodels 


C.  LCGICU  DATABASE  EESIGH 


As  stated  database  design  is  an  intuitive  and  artistic 
process.  There  is  nc  algoritha  for  it.  Typically  database 
design  is  ac  iterative  process  during  each  iteration,  the 
goal  is  to  get  closer  to  an  acceptable  design. Thus  a  design 


Figure  4.2  Flo*  Of  The  Database  Design. 


vill  he  developed  and  then  reviewed.  Defects  in  the  design 
will  be  identified  and  the  design  will  be  redone.  This 
process  is  reviewed  until  the  development  teas  and  users  can 
find  no  lajor  defects.  Figure  4.2,  illustrates  the  flow  of 
work  in  a  typical  database  design  project.  User  requirements 
are  studied  and  a  logical  database  design  is  developed. 


Concurrently  the  preliminary  design  of  database  processing, 
programs  is  produced. Next  the  logical  database  and  the 
preliminary  designs  are  used  to  develop  the  physical  data¬ 
base  design  and  the  detailed  program  specifications.  Finally 
both  of  these  are  irput  to  the  implementation  phase  of  the 
project. 

1 .  Cut  cuts  Of  logical  Database  Design 

A  logical  database  design  specifies  the  logical 
format  of  the  database.  The  records  to  be  maintained,  their 
contents  and  relationships  among  those  records  are  speci¬ 
fied.  It  is  sometimes  called  the  schema,  the  conceptual 
schema,  cr  the  logical  schema. 

a.  LOGICAL  DATABASE  RECORDS 

To  specify  logical  records  the  designer  must 
determine  the  level  cf  the  detail  of  the  database  model.  If 
the  model  is  highly  aggregated  and  generalized,  there  will 
be  few  records.  If  the  model  is  detailed  there  will  be  many 
records.  The  database  designer  must  examine  the  reguirements 
to  determine  hov  ccarse  or  how  fine  the  database  model 
should  be.  The  contents  of  these  records  are  specified 
during  logical  design.  Names  of  the  fields  and  their  fcrmat 
must  be  determined. 

As  the  reguirements  are  evaluated  and  the  design 
progresses  constraints  on  data  items  will  be  identified. 
These  constraints  are  limitations  on  the  values  that  data¬ 
base  can  have.  Three  types  of  constructs  are  common.  Field 
constraints  limit  the  values  that  a  given  data  item  have. 
Intrarecord  constraints  limit  values  between  fields  within  a 
given  record.  Interrecord  constraints  limit  the  values 
between  fields  in  different  records. 


t.  LOGICAL  I JTABAS E  RECORD  RELATIONSHIPS 


The  essence  of  database  is  the  representation  of 
the  record  relationships.  These  relationships  are  specified 
during  the  logical  design.  The  designer  studies  the  applica¬ 
tion  environment  examines  the  requirements  and  identifies 
the  necessary  relationships.  In  general  the  relationship  can 
always  be  omitted  later  in  physical  design,  where  as  if  the 
relationship  were  omitted  during  logical  design,  it  would  be 
difficult  to  add  it  later.  The  determination  of  record  types 
and  relationships  is  an  iterative  process.  While  identifying 
relationships  the  teas  may  discover  a  reason  for  a  new 
record  type;  and  while  discussing  record  types  the  team  may 
identify  a  relationship.  These  two  constructs  are  designed 
simultaneously . 

i 

2  •  Cesign  Reviews 

The  final  stage  of  logical  database  •  design  is  a 
review.  The  logical  schema  and  the  user  views  are  examined 
in  light  of  the  requirements  and  program  descriptions.  Every 
attempt  is  made  to  identify  omissions,  unworkable  aspects, 
or  other  flows  in  the  design.  Typically  a  panel  of  indepen¬ 
dent  data  processing  people  is  convened  for  this  review. 
Documentation  of  the  logical  schema,  user  views,  and  program 
descriptions  is  examined  by  the  panel  and  the  oral  presenta¬ 
tions  are  evaluated.  At  the  conclusion  of  the  design  review 
the  panel  produces  a  list  of  problems  discovered  and  a 
recommendation  regarding  the  next  step  to  be  taken.  The 
panel  usually  recommends  that  the  project  be  continued  while 
identified  problems  ace  fixed.  Occasionally  however  the 
design  pauiel  may  recommend  that  the  database  design  be 
repeated.  Very  rarely  the  panel  may  recommend  that  the 
project  he  discontinued. 
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3.  logical  Design  Primitives 


A  logical  design  is  a  representation  of  reality.  It 
is  a  model  of  aspects  of  some  activity  that  are  interest  to 
sponsors  of  the  database.  Such  models  represent  selected 
portions  of  reality;  the  models  are  developed  by  aggregation 
and  generalization.  Since  the  database  represents  a  subset 
of  reality,  some  guestions  about  reality  become  unanswer¬ 
able.  lie  goal  when  developing  a  database  design  is  tc  make 
only  uninteresting  guestions  unanswerable. 

4.  Primitives  In  The  Beal  World 


Before  we  begin  to  design  files  and  relationships  we 
need  to  describe  the  foundations  of  the  data  modeling.  We 
need  to  answer  questions  like:  Where  do  we  begin?  What  is  it 
that  we  are  trying  to  ,re present?  with  what  aspects  of 
reality  are  we  to  be  concerned?  We  have  to  be  careful 
answering  these  guestions. 

To  make  progress,  therefore  we  need  to  establish  a 
starting  point.  We  will  begin  with  a  set  of  fundamental 
structures  or  primitives. 


1.  The  first  primitive  is  object.  The  real  world 
has  objects  they  are  phenomena  that  can  be 
represented  by  nouns. 

2.  Objects  are  grouped  into  object  classes,  another 
important  primitive.  This  is  done  by  generali¬ 
zation. 


3.  Objects  have  properties.  A  property  is  a  charac¬ 
teristic  cf  an  object. 


4. 


The  collection  of  all  possible  instances  of  a 
property  is  called  a  property  value  set. 


5.  &  fact  is  an  assertion  that  for  a  given  object, 
a  particular  property  has  a  particular  element 
from  the  property  value  set. 

6.  Objects  can  be  related  to  one  another.  These 
relations  are  called  associations.  Associations 
can  exist  between  objects  of  the  same  class  or 
of  different  classes. 

5.  Primitives  Jn  The  Conceptual  World 

When  we  design  or  process  a  database  we  are  not 
working  with  real  world  primitives  like  objects  and  proper¬ 
ties.  We  are  working  with  the  representations  of  these 
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Beal  world  primitives 

Conceptual  priaitives 

Object . 

.. .Entity 

Object  Class . 

...Entity  Class 

Property . 

. .  .Attribute 

Property  value  set . 

. .  .Domain 

Fact ....... .... .. ....  ... 

...  Value 

Association . 

. .  .Relationship 

Figure  4.3  Conceptual  Primitives. 


priaitives.  As  we  defined  in  previous  subsection  there  are 
correspondences  of  the  real  world  primitives  which  are 
called  conceptual  priaitives  which  are  illustrated  in  Figure 
.3  . 


0.  TEE  SEHAITIC  DATA  HO  DEL 

The  semantic  data  model  (SOM)  was  developed  by  Hammer 
and  Hclecd  [Hef.  2]  and  first  published  in  1981.  We  will  use 
this  model  to  design  cur  database. 

The  most  important  advantage  of  SDH  is  that  it  provides 
a  facility  for  expressing  meaning  about  the  data  in  the 
database.  During  logical  database  design  ve  need  such  a 
facility  to  avoid  confusion  and  to  document  learnings, 
design  decisions,  and  constraints.  SDH  provides  better 
facilities  for  such  documentation  than  other  data  models. 

Another  advantage  of  the  SDH  is  that  it  allows  data  to 
be  described  in  context.  Users  see  data  from  different 
perspectives.  They  see  it  relative  to  their  field  of 
operation.  SDH  allows  relative  data  definition. 

A  third  advantage  of  'SDH  is  that  constraints  on  database 
data  can  be  defined  for  example  if  a  given  item  is  not 
changeable  SDH  allows  this  fact  to  be  stated.  Also,  if  an 
attribute  must  conform  to  a  particular  format  these  consid¬ 
erations  can  readily  be  defined.  With  other  data  models  such 
constraints  are  not  part  of  the  schema  description  and  are 
documented  separately. 

SDH  describes  the  structure  of  data  instead  of  structure 
of  programs.  SDH  has  certain  structures  and  rules  and  with 
those  structures  and  rules  the  designer  has  a  good  deal  of 
latitude  and  flexibility. 

1  •  Defining  Entity  Classes 

Entities  are  organized  into  classes.  Each  SDH  entity 
class  may  have  a  name,  a  description,  members  (the  entities) 
and  two  kind  of  attributes.  Figure  4.4,  shows  the  basic 
format  of  an  SDH  entity  class  description.  In  this  figure 
entity  class  names  are  printed  in  capital  letters.  SDH  terms 
are  shown  in  small  letters  followed  by  a  colon. 


EN1I1I—CLASS_NANE 

(desription: _ ) 

(interclass  connection: 
member  attributes: 
Attribute  name 


_ ) 


value  class: _ 

(mandatory) 

(multivalued) 

(exhausts  value  class) 

(not  changeable) 

(inverse:  Attribute_name) 

(match:  Attribute  name  of  ENTITY 
CLASS  on  Attribute  name2T 

i 

(derivaticn:  _ _ ) 

class  attributes: 

At tribute_name 

(description:  _ ) 

value  class: _ _ 

(derivation: _ ) 

identifiers: 

Attribute_name1  ♦  (Attribute_name2  ♦  (..)) 


Figure  4.4  Entity  Class  Description. 


Entity  class  is  named  and  then  an  informal  descrip¬ 
tion  of  the  class  is  provided.  The  description  which  is 
optional  defines  the  purpose  of  and  content  of  the  class. 
Special  remarks  are  also  written  here.  Next  the  member 
attributes  are  defined.  These  are  attributes  of  the  entities 
in  this  class.  Class  attributes,  which  are  optional  belong 
to  the  class  as  a  whole  and  not  to  any  particular  member. 


2.  Hod  Ease  Entity  Classes 

Nonbase  classes  are  constructed  from  subsets  of  of 
other  classes.  Ever;  nonbase  class  has  an  entry  Interclass 
connection  that  describes  how  the  class  is  to  be 
constructed.  For  subsets  the  interclass  connection  names 
another  class  and  specifies  which  members  of  that  class  are 
to  be  included  in  the  new  class. 

3 .  E§|isiaa  Attributes 

Each  entity  or  member  of  a  class  has  a  set  of  attri¬ 
butes.  These  attributes  represent  the  properties  of  objects. 
In  SDH  each  attribute  has  a  name,  an  optional  description  a 
value  class  and  a  set  of  optional  characteristics.  These  are 


Mane 

Description 
Value  class 


Mandatory  Initial  capital  letter 
Optional  Remarks  about  attribute 

Mandatory  The  domain  of  the  attribute 


Descriptor  characteristics 
Single  or  multivalued 
Value  optional  or  mandatory 
Changeable  or  not  changeable 
Exhaustive  or  nonexhaustive 
Overlapping  or  noncverlapping 


Default  Value 

Single 

Optional 

Changeable 

Nonexhaustive 

Overlapping 


Figure  4.  5  Attributes. 


summarized  in  figure  4.5  Attribute  names  are  printed  with 
initial  capitals.  They  must  be  unigue  within  the  class 
where  they  are  defined.  Also,  they  must  be  unigue  within 
all  classes  that  derived  from  their  class  of  definition. 
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4.  Attribute  Value  Classes 


Each  attribute  must  have  a  value  class.  In  SDH  value 
classes  are  defined  as  entity  classes.  Thus  the  definition 
of  every  attribute  references  another  value  class  which 
references  another  and  on  and  on.  However  regression  is 
stopped  in  SDH  by  the  existence  of  special  class  called 
Strings.  String  is  a  default  entity  class;  it  needs  no  defi¬ 
nition.  Strings  contains  any  character  string  that  the 
designer  wants.  Any  nonaabiguous  definition  of  a  string  is 
allowed. 

There  are  two  advantages  of  defining  attribute 
domains  as  entity  classes.  First  the  foraats  and  the 
constraints  on  data  iteas  are  clearly  specified.  Second 
allowing  attributes  to  be  aeabers  of  entity  classes  permits 
a  very  natural,  hunarr  oriented  way  of  expressing  the 
relationships. 

5.  Additional  Attribute  Characteristics 

As  we  have  shown  in  Figure  4.5,  there  are  scae 
additional  characteristics  of  attributes. 

Attributes  can  be  single  or  multivalued  (like 
repeating  fields);  they  can  be  aandatory,  aeaning  that  a 
null  value  is  never  to  be  accepted;  attributes  can  be  not 
changeable,  aeaning  that  except  to  correct  errors,  the  value 
of  the  attribute  must  remain  saae. 

An  attribute  can  be  exhaustive,  meaning  that  every 
aeaber  of  the  value  class  Bust  be  used.  A  multivalued  attri¬ 
butes  can  be  specified  as  nonoverlaping  this  aeans  that  a 
aeaber  of  the  value  class  can  be  used  at  once. 

^ •  £si fislalion ships 

SDH  provides  three  facilities  for  defining  relation¬ 
ships.  All  three  facilities  use  the  SDH  characteristic  that 
entities  can  be  contained  within  entities. 


a.  Defining  Relationships  With  Inverse 

The  inverse  facility  causes  two  entities  to  be 
contained  within  each  other.  Physically  this  is  impossible. 
Seguential  including  of  each  attribute  to  each  other  will 
result  in  infinite  regression.  But  for  our  purposes  we  will 
ignore  the  infinite  regression.  After  the  first  level  all 
regressions  are  duplications  of  the  data  and  hence  unimpor¬ 
tant.  The  beauty  of  SDH  is  that  users  can  have  it  both  ways. 
They  can  see  data  as  they  want  to  see  data,  even  if  these 
ways  are  seemingly  ccntradictory.  In  actuality  these  views 
do  not  conflict  at  all.  They  are  simply  different  views  of 
the  same  thing. 


b.  Defining  Relationships  Rith  Matching 

» 

The  second  SDH  facility  for  representing  rela¬ 
tionships  is  matching.  With  matching  a  member  of  one  entity 
class  is  matched  with  a  member  of  another  entity  class.  Then 
the  value  of  an  attribute  in  one  of  the  members  is  moved  to 
the  ether.  The  word  ON  defines  how  the  members  in  the  two 
classes  must  match. 


c.  Defining  Relationships  with  Derivations 

SDH  provides  a  derivation  capability  for  attri¬ 
butes.  Derivation  can  be  used  to  specify  relationships  among 
members  in  the  same  entity  class.  Thus  we  can  derive  new 
attributes  from  the  existed  ones.  £Bef.  3] 

So  far  we  have  talked  about  logical  database 
design  and  the  semantic  data  base  model.  Now, by  using  these 
information, we  will  design  our  database  for  Air  Forces 
Command.  First  of  all  we  should  reconsider  these  require¬ 
ments  which  have  been  discussed  in  Chapter  1.  Ne  should 
define  the  records,  according  to  these  requirements. 
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At  the  first  step  we  built  nine  separate  records 
for  Air  forces  Conaand.  These  records  are  in  following: 

1.  Weapons 

2.  Aaauniticr 

3.  Perscnnel 

4.  Intelligence 

5.  Status 

6.  Installation 

7.  logistics 

8.  Maintenance 

9.  Courses 

These  reccrds  aaJce  up  the  scheaa.  Other  levels 
in  air  force  systea  have  a  subset  of  this  scheaa.  The;  have 
alaost  saae  records  but  the  inforaation  in  these  records  are 
liaited  with  their  needs. 

For  instance  Tactical  Air  Forces  have  the  inf or- 
nation  just  for  the  bases  which  are  dependent  to  TAF,  Supply 
and  naintenance  centers,  EV  center.  Bases  can  not  have  the 
inforaation  related  with  an  another  base.  They  have  the 
inforaation  related  cnly  with  its  own  subparts. 

TAFs  have  exactly  the  saae  records  tc  which 
AFC OH  has.  But  the  only  difference,  is  AFCOM  has  such  aore 
data  than  bases  have.  In  base's  database  courses  record  has 
not  been  included,  because  it  is  needless.  Rest  of  the 
records  are  also  included  in  base  database.  We  designed  only 
the  ainiaal  nuaber  of  records  here.  Since,  different  appli¬ 
cations  will  need  different  records.  What  we  did  here  is  an 
exaaple  of  the  logical  database  design.  Thus,  we  will  not 
consider  the  database  needs  of  EWCs  and  supply,  aaintenance 
centers.  These  can  be  iapleaented  in  the  saae  way  which  will 
be  shewn  later  in  this  chapter.  Thus  only  one  database 
design  can  be  used  by  all  the  systea  coaponents.  This  will 
be  very  effective  in  teras  of  siaplicity,  back-up,  recovery, 
security  and  integrity.  Especially  this  kind  of  design 


consideration  will  be  very  useful,  when  ve  consider  the 
network  facilities  for  this  system.  Networking  can  be 
achieved  easily  because  of  the  siaplicity  and  regularity  of 
databases  which  reside  in  different  places  and  different 
aachines. 

After  these  considerations  now,  we  can  lock  at 
the  database  itself.  Again  the  formal  structure  of  the  data¬ 
base  is  taken  from  STB,  and  it  has  the  sane  structure  with 
the  one  which  has  been  illustrated  in  Figure  8. 

I.  H1APCHS 

1.  description:  Includes  all  the  information, related 

with  every  type  of  weapon  systeas  which  are 
currently  in  Air  Force  inventory. 

2.  neater  attributes: 

a)  Htype 

i)  description : Type  ox  the  weapon  system  of  the 
friendly  forces  and  and  eneny  forces. 

ii)  value  class :HEAP0N_T7PE 

iii)  mandatory 

b)  Hid 

i)  description:  Hhether  the  weapon  is  eneny* s 
or  ours  or  both's. 

ii)  value  class:  FBIEND_FOE 

iii)  nandatory 

c)  Hrange 

i)  descxiption:  Effective  range  of  the  weapon 
systea. 

ii)  value  class:  BANGE 

d)  Hfuel 
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i) 

description:  Fuel  capacity  of  the 

it  uses  fuel. 

systea 

if 

ii) 

value  class:  FOIL 

e) 

Dibs 

i) 

description:  Saxiaua  aaaunition  lead  cf 

the 

veapen  system. 

ii) 

value  class:  HAX_LOAD 

iii) 

not  changeable 

f) 

Haaao 

i) 

description:  Types  of  aaaunition 

which 

can 

be  used  by  this  type  of  weapon  systea  . 

ii) 

value  class:  AHHOHITION 

iii) 

inverse:  HHIRE_tJSED 

iv) 

multivalued 

▼) 

mandatory 

9) 

Bnua 

i) 

description:  The  total  number  of 

this  type 

of  weapon  system. 

ii) 

value  class:  NOHBER_OF_NEAPONS 

iii) 

mandatory 

iv) 

class  attributes: 

fa) 

Hdate 

i) 

description:  Day  of  the  year  on 

which 

the 

inforaation  is  valid (last  changing 

date) . 

ii) 

value  class: DATE 

.  identifiers:  W TIP E 


AHHOIITIOI 

.  descriptions:  Includes  all  the  information  related 
with  every  type  of  aaaunition  which  are  currently  in 
air  forces  inventory. 
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member  attributes: 


a)  Acat 

i)  description:  Category  of  the  ammunition 

which  are  used  in  weapoa  systess. 

ii)  value  class:  ANSO_CATEGORI 

iii)  mandatory 

iv)  not  changeable 


b)  Hhere_used 


i)  description:  Types  of  weapons  which  use  this 
category  of  ammunition. 

ii)  value  class:  liEAPONS 

iii)  inverse:  HA  MHO 

iv)  multivalued 


c)  Anua 

i)  description:  Total  number  of  this  category 
cf  ammunition  currently  in  inventory  . 

ii)  value  class :NaMBER_OFJlEAPONS 

iii)  mandatory 


d)  Albs 

i) 

ii) 

iii) 

iv) 


description:  Height  of  one  round  of  this 

category  of  anmunition. 

value  class:  NAX_LOAD 

mandatory 

not  changeable 


e)  Akill 


i)  description:  Killing  radius  of  this  category 
ammunition. 

ii)  value  class:  RANGE 


f )  A  war 

i) 

ii) 


description:  Type  of  warhead  of  ammunition 
value  class:  HARHEAD  CAT 


iii)  multivalued 

iv)  class  attritutes: 


g)  Adate 

i)  description:  Day  of  the  year  on  which  the 
information  is  valid  (last  changing  date) . 

ii)  value  class:  DATE 
3.  identifiers:  ACAT 

G.  FEfiSCIlEl 

1.  description:  Includes  all  the  information  related 

with  the  personnel  who  are  in  charge  of  Air  Forces. 

2.  member  attributes: 


a) 

Pname 

i) 

description : First  name  of  personnel 

ii) 

value  class: HA ME 

iii) 

mandatory 

iv) 

not  changeable 

b) 

Plastname 

i) 

value  class:  NAME 

ii) 

mandatory 

iii) 

not  changeable 

c) 

P  address 

i) 

value  class:  ADDBESS 

ii) 

mandatory 

d)  Gradyear_  degree 

i)  description:  Graduation  year  from  Air  Force 
academy  or  technical  schools  and  graduation 
degree  are  concatenated  to  make  a  unigue 
key. 


48 


ii)  value  class:  GRADYEAR^DEG 

iii)  mandatory 

iv)  not  changeable 

e)  Assgnmntloc_date 

i)  description:  Name  of  the  locations  at  which 
the  personnel  have  been  there  at  least  once, 
after  graduation.  Assignment  date  to  those 
locations  is  concatenated. 

ii)  value  class:  LOCATIONS 

iii)  mandatory 

iv)  multivalued 

f )  Rank 

i)  value  class:  RANK 

ii)  mandatory 

g)  Prodate 

i)  Description:  Date  of  the  last  promotion. 

ii)  value  class:  DATE 

iii)  mandatory 

h)  Specode 

i)  description:  Indicates  the  personnel* s 

special  training  or  skill  area. 

ii)  value  class :  SPECIALTY 

iii)  mandatory 

iv)  multivalued 

i)  Marsta 

i)  description:  Marital  status  of  personnel. 

ii)  value  class:  MAR.STA 

j)  Nife_name- occupation 

i)  desccriptio n: Rif e *s  name  and  occupation  are 
concatenated  . 

ii)  value  class :NAME_OCCOPATION 


k)  Ckild_name_school 

i)  description :Child*s  naae  and  school  grade 
are  ccncatenated  .  School  grade  is  repre¬ 
sented  only  with  its  grade  (E,  HrC) 

ii)  value  class : HAME_school 

iii)  multivalued 

l)  Lang_level 

i)  description: The  languages  which  are  known 
and  their  levels. 

ii)  value  class :  LAHGUAGE_L£VEL 

iii)  multivalued 

a)  Paygrade 

i)  value  class :  PA  T_GfiADE 

ii)  mandatory 

n)  Punishments 

i)  description:  Suaaary  of  the  personnel’s 

criminal  background. 

ii)  value  class:  POSISHEEHT 

iii)  multivalued 

o)  Awards 

i)  value  class:  ABARDS_RECEIVED 

ii)  multivalued 

P)  Ccurses_date 

i)  descriptions:  Course  no’s  and  dates  to  which 

the  personnel  attended. 

ii)  value  class:  C00BSE_0ATE 

iii)  aultivalued 

g)  flealth_status 

i)  descriptions:  If  personnel  had  any  major 

operations  or  important  illness  in  the  past 
those  inf or  nation  can  be  kept  with  its  date 
in  this  part  . 


50 


ii)  value  class :HEALTH_STATOS 

iii)  multivalued 

3.  identifiers:  GBADYEA R_DEGREE 

fl.  I1TE1LIGESCE 

1.  description:  Includes  all  the  information  about  enemy 
forces.  Also  includes  the  locations  of  the  enemy 
forces  and  the  date  on  which  the  information  is 
provided. 

2.  member  attributes: 


a) 

I  day 

i) 

description : 

The  day  of  intelligence  is 

provided.1 

ii) 

value  class: 

CATE 

iii) 

mandatory 

b) 

lid 

i) 

description : 

Id  of  the  enemy  installation 

intelligence 

was  made  on  that  . 

ii) 

value  class: 

I HSTALLATION_ID 

iii) 

mandatory 

c) 

I  type. 

.nun 

i) 

description : 

Observed  weapons  and  the  guan- 

tity  of  this 

type  of  weapons  at  that  instal- 

laticn.  Weapon  type  is  concatenated  with  the 
number  of  this  type  weapons  observed  on  a 
particular  day. 

ii)  value  class:ITYP_NUB 

iii)  multivalued 

iv)  mandatory 


51 


■Vip.af  nl  «A.  inJfc.lTlfrijSjhl  »'lll  TV.?-, 


J  3SN3dX3  1N^NU3A00  J.V  aaDnaouaaH 

■  '.•-V-Vv  .•  >.v  •  -.^vrv  •. 

*  -  »  -  *-*-  -  *  -  *  ■»  *-  W.k  -»  :  _  > .  -  -e  in  > 


REPRODUCED  AT  GOVERNMENT  EXPENSE 


% 


d)  Artiairtype_num 

i)  desription: Observed  antiaircraft  weapon 
systems  and  the  quantity  of  this  type  of 
weapons  at  that  installation.  Weapon  type  is 
concatenated  with  the  number  of  this  type 
observed  on  a  particular  day  . 

ii)  value  class:  ANTITIPE_HU  ti 

iii)  multivalued 

e)  location 

i)  description:  locations  of  the  anti-aircraf t 
weapon  systems.  This  information  can  be 
represented  by  geographical  coordinates. 

ii)  value  class:  ANTIJkIBCRAFT_LOCATIOH 

iii)  multivalued 

f)  Weather 

i)  description:  Weather  status  of  the  day  on 
which  the  intelligence  is  provided.  (  espe¬ 
cially  for  photo  intelligence  ,  or  tactical 
reconnaissance  aissions  ). 

ii)  value  class:  WEATHER_STATOS 

Identifiers: Iday  ♦  lid  ♦  Itype_nun  ♦  Antiairtypejnum 


STATES 

.  description:  Includes  periodic  inforaation  which  coae 
froa  all  the  subparts  of  Air  Forces  .  This  inforaa- 
tion  includes  brief  operational  readiness  in  terns  of 
eguipaent  ,  material  and  personnel. 

.  member  attributes: 


a)  Sday 


i)  description:  The  date  of  the  status  report 
which  is  valid  for  that  day. 

ii)  value  class:  CATE 

iii)  mandatory 

b)  Siid 

i)  description:  Installation  id  which  status 
report  belongs  to  it. 

ii)  value  class:  INSTALLATION_ID 

iii)  mandatory 

c)  Onoprtype_rum 

i)  description : Unoperational  aircraft  type  and 
the  number  of  them. 

ii)  value  class:  UNOPRTIPE_NOM 

iii)  multivalued 

d)  Numpers 

i)  description : number  of  the  personnel  which 
are  currently  operationally  ready  in  an 
installation  . 

ii)  value  class:  NUMBEB_OF  ^PERSONNEL 

iii)  mandatory 

e)  Tacsta 

i)  description:  Status  of  the  TACAN  system  if 
there  exists  in  that  installation. 

ii)  value  class:  NAVIGATION_STATUS 

f)  Gcasta 

i)  description:  Status  of  the  GCA  system  if 
there  exists  in  that  installation. 

ii)  value  class:  MAVIGATIO»_STATUS 

g)  Sfsta 

i)  description: Status  of  the  RF  system  if  there 
exists  in  that  installation. 
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ii)  value  class:  NA7IGATI0H_STATUS 


h)  Ilssta 

i)  description:  Status  of  the  ILS  system  if 
there  exists  in  that  installation  . 

ii)  value  class:  NAVIGATION_STATUS 

i)  Weather 

i)  description:  Weather  status  of  the  installa¬ 
tion  area  . 

ii)  value  class:  WEATHER_STATUS 

iii)  mandatory 

.  Identifiers:  Sday  ♦  Siid 


I 1ST All ATI OH 

« 

.  description:  Includes  all  the  information  on  instal¬ 
lations.  Identification  of  installation, type  of 
weapons, category  of  installation. 

.  member  attributes: 


i)  description:  Installation  id  which  uniguely 
deteriines  installation. 

ii)  value  class:  INSTA1IATI0N_ID 

iii)  mandatory 

iv)  not  changeable 


b)  Icat 

i)  description:  Installation  category. This  is 
important  in  terms  of  assignments. Because 
each  personnel  has  to  be  assigned  to 
different  category  of  installations  for  a 
certain  period. 


ii)  value  class;  INSTALLATION_CATEGOE¥ 

iii)  mandatory 

iv)  not  changeable 

c)  Htype_inua 

i)  description:  The  type  of  weapons  and  the 
guantity  of  them  which  are  currently  in  this 
installation.  No  matter  what  conditions  are 
there  in.  (operational  or  unoperational)  . 

ii)  value  class:  ITYPE_N0B 

iii)  mandatory 

iv)  multivalued 

d)  Ipers 

i)  description: Total  number  of  personnel  which 

are  currently  in  charge  of  that  installa¬ 
tion. 

ii)  value  class:  NUHBEH_OP_PEBSONNEL 

iii)  mandatory 

3.  Identifiers:  lid 

LOGISTICS 

1.  description:  Includes  all  the  information  about 

logistics  records,  supply  and  maintenance  activities 
and  logistics  management. 

2.  member  attributes: 
a)  Part_no 

i)  description:  Onigue  standard  national  part 

no's  of  all  parts  which  are  currently  in  Air 
Forces  inventory. 

ii)  value  class:  PART_NO 

iii)  mandatory 
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iv)  not  changeable 


b)  Part_naae 

i)  value  class:  P  ART_NA!iES 

c)  Lccation_nua 

i)  description:  fihere  these  parts  are  located 
and  hew  many  of  then  are  in  that  locaticn. 
Location  and  the  nuaber  are  concatenated. 

ii)  value  class  :  LCCATION_KUMBEB 

iii)  aandatory 

iv)  aultivalued 

d)  Suppliernaae_address 

i)  description:  Naae  and  address  of  the 

supplier  of  a  particular  part  are  concat¬ 
enated.  There  aay  be  nore  than  one  supplier 
for  soae  .parts. 

ii)  value  class:  NAME_ADDBESS 

iii)  aand  a  tor  y 

iv)  aultivalued 

e)  Price 

i)  description : Price  of  one  unit  of  that 
itea.This  inf  or nation  is  needed  for  bock¬ 
keeping  purposes.  Prices  aay  differ  frot  cne 
supplier  to  another. 

ii)  value  class:  ITIHJPBICE 

iii)  aandatory 

iv)  aultivalued 

f)  purchase_date 

i)  description:  The  last  date  of  the  purchase 
for  a  particular  itea. 

ii)  value  class:  DATE 


Identifiers:  fart  no 


HAIHTEiAiCE 


.  description:  Includes  all  the  information  in  terms  of 

planning  and  executing  the  maintenance  activities. 

.  member  attributes: 

a)  Eqp_no 

i)  description:  Serial  number  of  the  equipment. 

ii)  value  class:  ZQaiPdEHI.NO 

iii)  mandatory 

iv)  not  changeable 

b)  Egpname 

i)  description:  Short  description  of  equipment. 

ii)  value  class:  EQUIPHEMT.HABE 

c)  Eqpcat 

i)  description';  Bguipnent 

category  (HP, VHP, OflP, gasoline, diesel)  .This  is 
a  kind  of  additional  information  to  equip* 
sent  name. This  field  is  optional  and  it  can 
be  omitted  if  wanted  so. 

ii)  value  class:  ECP.CATEGOBT 

d)  Arrival_dat€ 

i)  description:  The  date  on  which  the  equipment 

arrived  at  the  supply  and  maintenance 
center.  This  is  important  because  of  mainte¬ 
nance  planning. 

ii)  value  class:  DATE 

iii)  mandatory 

e)  Trouble 

i)  description:  The  trouble  which  is  reported 

to  supply  and  maintenance  center  by  the 
users  of  equipment.  Equipment  may  not  have 


any  trouble.  It  sight  be  for  periodic  main¬ 
tenance  and  calibration. 

ii)  value  class:  EQOIP8ENT_7RO(JBLE 

iii)  mandatory 

iv)  multivalued 

f)  Regparts 

i)  description:  To  keep  track  of  the  replace¬ 
ment  part  needs,  we  included  the  required 
parts  which  are  needed  to  repair  the  equip¬ 
ment. 

ii)  value  class:  PAHT_NO 

iii)  multivalued 

g)  Eiid 

i)  description s Installation  id  code  that  the 

« 

equipment  belongs. This  information  is  needed 
to  send  the  equipment  back  to  its  owner. 

ii)  value  class:  IHSTALLATIOH_ID 

iii)  mandatory 

h)  Owner 

i)  description:  This  is  the  owner  of  the  equip¬ 
ment.  This  is  the  in  base  address  of  the 
cwner. 

ii)  value  class:  EQP_OHNEB 

.  Identifiers:  E9p.n0  ♦  Arri validate  ♦  Owner 

CC01SBS 

.  description:  Includes  all  courses  offered  by  Air 

Force  command  in  the  past,  present  and  future  time. 

This  information  will  provide  planning  and  choosing 

the  persons  who  will  participate  to  these  courses. 


2.  member  attributes: 


a)  Course_no 

i)  description:  Each  course  has  a  unique  number 
which  is  related  with  its  topic. 

ii)  value  class:  CCURSENO 

iii)  mandatory 

b)  Ccurse_name 

i)  value  class:  COURSENAME 

ii)  mandatory 

c)  Course.location 

i)  value  class:  COURSELOCATION 

ii)  mandatory 

iii)  multivalued 

« 

d)  Number.of.hcurs 

i)  value  class:  COURSE.PERIOD 

ii)  mandatory 

e)  Start.date 

i)  value  class:  LATE 

f)  Participants 

i)  description:  Names  of  the  personnel  whc  did 

or  will  attend  to  this  course. 

ii)  value  class:  PARTICIPANT*  S.NA HE 

iii)  multivalued 

3.  Identifiers:  Ccurse.no 

1.  STRING  TYPES 

Now  we  should  define  the  string  types  for  those  records. 
Strings  are  following. 


1.  WEAPON  TYPE 


interclass  ccnnection:  Subclass  of  STRINGS  where 
format  is  5-alphanumeric  character  string.  Slash  and 
dash  can  be  included  in  string. 

2.  F  B I E  ND_  FO  E 

interclass  ccnnection:  Subclass  of  STRINGS  where 
foraat  is  3-alpha  character  string. The  values  are 
either  FRC  or  FOE. 

3.  RANGE 

interclass  ccnnection:  Subclass  of  STRINGS  where 

value  is  positive  integer  less  than  25,000. 

4.  FUEL 

« 

interclass  connection:  Subclass  of  STRINGS  where  the 
value  is  positive  integers  less  than  30,000. 

5.  HAI^IOAD 

interclass  ccnnection:  Subclass  of  STRINGS  where 

value  is  positive  integer  less  than  100,000. 

6.  NUMEER_OP_WEAICNS 

interclass  ccnnection:  Subclass  of  STRINGS  where 

value  is  in  between  0.. 10, 000. 

7.  EAIE 

interclass  ccnnection:  Subclass  of  STRINGS  where 

foraat  is  ddaayy  where  dd« 1. . 31 ;aa* 1. . 12  and 
yy»0..99. 

8.  AEHC_CATEGORI 
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interclass  connection:  Subclass  of  STRINGS  where 

fcraat  is  single  letter  string  in  A..G. 

9.  H1BHEAD_CAT 

interclass  connection:  Subclass  of  STRINGS  where  the 
value  is  in  1..10. 

10.  NAME 

interclass  connection:  Subclass  of  STRINGS  where 

fcraat  is  10-letter  character  string. 

11.  AEDBESS 

interclass  connection:  Subclass  of  STRINGS  where 

format  is  1 5-ch/street;  10-ch/apt;  4-digit/no; 
10-ch/city;  2-ch/state;  5-digit/zip; 

12.  GRAEYEAR_EEGREE 

interclass  connection:  Subclass  of  STRINGS  where 

foraat  is  yyyy/ddd  where  yyyy  represents  the  year, ddd 
represents  the  graduation  degree. 

13.  LOCATIONS 

interclass  ccnnection:  Subclass  of  STRINGS  where 

fcraat  is  4-digit  nuaber,  which  is  installation  id. 

14.  RANK 

interclass  connection:  Subclass  of  STRINGS  where 

foraat  is  10-ch  long  string. 

15.  SPECIALTY 

interclass  ccnnection:  Subclass  of  STRINGS  where 

fcraat  is  4-digit  string. 


16.  MAR  STATUS 


interclass  connections  Subclass  of  STRINGS  where 

format  is  single  character  which  is  in  (S,M#D,H)  . 

17.  NAME.OCCDPATICN 

interclass  connections  Subclass  of  STRINGS  where 

for  sat  is  concatenation  of  25-Ch  name/lastname  string 
and  10-Ch  long  occupation  string. 

18.  NAMEJSCHOOL 

interclass  connections  Subclass  of  STRINGS  where 

format  is  concatenation  of  15-Ch  name  string  and  3-Ch 
school  string  which  is  in  (ELH,HIG,COL) • 

19.  LANGOAG E.1EVEI 

interclass  connections  Subclass  of  STRINGS  where 

format  is  4-th  string  which  are  in 

(EOOR,FAIS,GOCI,EXCL)  . 

20.  E AGGRADE 

interclass  connections  Subclass  of  STRINGS  where 

format  is  dd/1  where  dd  is  in  1..13  and  1  in  1..4. 

21.  PUNISHMENT 

interclass  connections  Subclass  of  STRINGS  where 

format  is  15-Ch  string. 

22.  ASARES.RECEIVEE 

interclass  connection:  Subclass  of  STRINGS  where 

format  is  10-Ch  string. 

23.  COURSE. DATE 

interclass  connections  Subclass  of  STRINGS  where 

format  is  4-digit  course  no  /ddmmyy  where 
dd«1..31 ; mm*1.. 12 jyy *0. .99. 


24.  HEALTH  STATUS 


interclass  connection:  Subclass  of  STRINGS  where 

fcxaat  is  25-Ch  long  string. 

25.  INSTALLATION^ 

interclass  connection:  Subclass  of  STRINGS  where 

foraat  is  4-digit  string. 

26.  I1IPZ_NUH 

interclass  connection:  Subclass  of  STRINGS  where 

foraat  is  5-alphanumer ic  character  string  /4-digit 
character  string. 

27.  ANTI1TP E_NUM 

interclass  connection:  Subclass  of  STRINGS  where 

foraat  is  5-alphanuaeric  character  string  /2-digit 
character  string. 

28.  ANTIAIBCR AFT^ICCATIO N 

interclass  connection:  subclass  of  STRINGS  where  the 
foraat  is  dd:aa;ss/d  where  dd=1 ..360; mn=1 .. 60; 
ss=1..60;  and  d  is  either  E  or  W . 

I 

29.  WEATHER_STATUS 

interclass  connection:  Subclass  of  STRINGS  where 

foraat  is  4-Ch  long  strings  which  are  POOR,  FAIR, 
GCCD. 

30.  UHOPRTTPEJ1UH 

interclass  connection:  Subclass  of  STRINGS  where 

foraat  is  4-alphanuaeric  character  string  /  2-digit 
nuaber. 


31.  NUNEER  OF  PERSONNEL 


interclass  connection:  Subclass  of  STRINGS  where 

fcraat  is  4-digit  strings  in  1..9999. 

32.  N1VIGATI0N_STA1US 

interclass  connection:  Subclass  of  STRINGS  where 

fcraat  is  1-letter  strings  in  (A,B,C,D). 

33.  INSTALLATION_CATEGORY 

interclass  connection:  Subclass  of  STRINGS  where 

fcraat  is  1-letter  strings  in  (A,B,C,D,E). 

34.  PARTING 

interclass  connection:  Sunglass  of  STRINGS  where 

fcraat  is  is  xxx-xxxx-xxx ;x  is  a  digit. 

35.  PART_NAHE 

interclass  connection:  Subclass  of  STRINGS  where 

fcraat  is  15-Ch  long  string. 

36.  1CCATIO N_ NON BEE 

interclass  connection:  Subclass  of  STRINGS  where 

fcraat  is  dddd/1111  where  dddd  is  installation  id 
code  d  is  a  digit; 1111  is  the  nuaber  of  this  part  in 
that  location.  1111  is  in  1..9999. 

37.  NAHEJUJDBESS 

interclass  connection:  Subclass  of  STRINGS  where 

foraat  is  15-Ch  naae,last  naze;  10-Ch/street;4-digit/ 
no;  10-Ch/city;  10-Ch/ state;  5-digit/zip. 

38.  ITEH_PRICE 

interclass  ccnnection:  Subclass  of  STRINGS  where 

foraat  is  ddddddddd. dd  where  d's  are  digits. 
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39.  ECUI?MENT_NO 

interclass  connection:  Subclass  of  STRINGS  where 

fcraat  is  xxx-xxxx-xxx  where  x’s  are  digits. 

40.  ECUIIMENT_NANI 

interclass  connection:  Subclass  of  STRINGS  where 

fcrnat  is  15-Ch  long  string. 

41.  ECP_CATEGORI 

interclass  connection:  Subclass  of  STRINGS  where 

fcrnat  is  4-Ch  long  string. 

42.  ECOIRHENTjrRODELE 

interclass  connection:  Subclass  of  STRINGS  where 

fornat  is  15-alpha  Character  long  string. 

i 

43.  ECR_CHNER 

interclass  connection:  Subclass  of  STRINGS  where 

fcrnat  is  15-  alpha  Character  long  string. 

44.  CCORSENO 

interclass  ccnnection:  Subclass  of  STRINGS  where 

fcrnat  is  4-digit  string. 

45.  CCURSENAHE 

interclass  ccnnection:  Subclass  of  STRINGS  where 

fcrnat  is  15-alpha  Character  string. 

46.  CCQBSELOCATION 

interclass  ccnnection:  Subclass  of  STRINGS  where 

fornat  is  10-alpha  Character  long  string. 

47.  CC0BSE_  PERIOD 


interclass  connection:  Subclass  of  STRINGS  vhere 

value  is  in  10.. 1000. 

48.  PARTICIPANT*  S_NAME 

interclass  connection:  Subclass  of  STRINGS  vhere 
format  is  10-alpha  Character  naoe/10-alpha  Character 
last  name. 


V.  BET woe K  COBSIDEBATIONS 


1.  IHTECDDCTIOH 

Tie  old  model  a  single  computer  serving  all  o£  tie  orga¬ 
nization’s  computational  needs  is  rapidly  being  replaced  by 
one  in  which  a  large  number  of  separate  but  interconnected 
computers  do  the  job.  These  systems  are  called  computer 
networks.  Two  computers  are  said  to  be  interconnected  if 
they  are  capable  of  exchanging  information.  By  requiring 
that  the  computers  be  autonomous,  we  exclude  from  our  defi¬ 
nition  systems  in  which  there  is  a  clear  master/slave  rela¬ 
tion.  In  our  view  a  distributed  system  is  a  special  case  of 
a  network,  one  with  a  high  degree  of  cohesiveness  and 
transperancy. 

In  our  information  system  we  need  a  great  deal  of  infor¬ 
mation  exchange  between  the  units.  Since  the  system  elements 
located  geographically  dispersed  in  order  to  exchange  infor¬ 
mation  than  we  need  to  design  an  information  network  between 
the  units.  This  network  will  accomplish  our  system  goals, 
which  have  been  previcusly  stated. 

B.  IITWCBK  GOkLS 

Air  forces  will  have  a  substantial  number  of  computers 
in  operation,  located  far  apart.  Initially  each  of  these 
computers  may  have  wczked  in  isolation  from  the  other  ones, 
at  a  certain  tine  AICON  may  decide  to  connect  then  to  be 
able  to  extract  or  correlate  icformation  about  the  entire 
system.  This  goal  is  to  make  all  programs,  data  and  ether 
resources  available  to  anyone  on  the  network  without 
regarding  to  the  physical  location  of  the  resource  and  the 
user.  Load  sharing  is  another  aspect  of  resource  sharing. 


In  air  forces  environment  system  elements  frequently  request 
information  from  other  ones  and  need  some  remote  queries  or 
update  remote  databases.  All  these  processes  need  a  vay  to 
accomplish  these  jots.  This  way  is  a  well-established 
information  network. 

A  second  goal  is  to  provide  high  reliability  by  having 
the  alternative  sources  of  supply.  With  unconnected 
computers  if  a  machine  goes  down  due  to  hardware  failure, 
even  though  there  may  be  substantial  computing  capacity 
available  elsewhere.  With  a  network  the  temporary  loss  of 
single  computer  is  much  less  serious,  because  its  users  can 
often  be  accomadated  elsewhere  until  service  is  restored.  In 
our  system  a  complete  loss  of  computing  power  for  even  a 
few  hours  due  to  some  catastrophe,  natural  or  otherwise  is 
completely  intolerable. 

Another  important  reason  for  distributing  computer  power 
has  to  do  with  the  relative  price  of  computation  versus 
communication.  Until  about  1970  computers  were  relatively 
expensive  compared  with  communication  facilities.  The 
reverse  is  now  true.  In  our  system  application  data  are 
generated  at  widely  scattered  points.  Prior  to  1970,  it  was 
not  feasible  to  put  the  computer  at  each  location  to  analyze 
the  data  because  the  computers  were  so  expensive.  Instead, 
all  the  data  are  transmitted  to  a  central  computer  some¬ 
where.  New  the  cost  of  a  small  computer  is  negligible,  so  it 
becomes  attractive  to  analyze  the  data  at  the  place  where 
it  is  captured,  and  only  send  occasional  summaries  back  to 
computer  center,  to  reduce  the  communication  cost,  which  now 
represents  a  larger  percentage  of  the  total  cost  than  it  is 
used  to.  This  approach  results  in  a  computer  network. 

Tet  another  goal  of  setting  up  a  computer  network  has 
little  to  do  with  networking  at  all.  As  a  side  effect  of  its 
other  gcals,  a  computer  network  can  provide  a  powerful 
communication  medium  among  widely  separated  people.  Using  a 
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network  it  is  easy  for  two  or  more  unit  which  are  far  apart 
to  write  a  report,  send  a  message.  When  a  change  occurs  the 
others  can  get  the  change  immediately,  instead  of  waiting 
for  a  long  period  of  time. 

Another  major  attraction  building  a  large  system  by 
coupling  large  number  of  smaller  machines  is  the  expectation 
of  a  simpler  software  design.  In  our  system  it  is  possible 
to  dedicate  some  (or  all)  of  the  processors  to  the 
specialized  functions  for  example  database  management. 


In ter processor 
distance 

processors 

location 

example 
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Figure  5.1  Classification  Of  Interconnected  Processors. 

By  eliainating  the  multiprogramming,  we  can  also  elimi¬ 
nate  much  of  the  software  complexity  associated  with  the 
large  mainframes. 
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In  figure  5.1  we  give  a  classification  of  multiple 
process  systeas  arranged  by  physical  size.  At  the  top  are 
data  flow  machines,  highly  parallel  computers  with  oany 
functional  units  all  working  on  the  saae  program.  Next  come 
the  multiprocessors,  systeas  that  coaaunicate  by  exchanging 
messages.  Finally  the  connection  of  two  or  more  distant 
network  is  called  internetworking.  In  our  application  our 
systea  can  be  classified  as  the  long  haul  network.  Since 
there  is  only  one  network  is  established  for  whole  systea. 

C.  IFTHCBR  STB U CTO B I 

In  any  network  there  exist  a  collection  of  aachines 
intended  for  running  user  programs.  These  aachines  are 
called  hosts.  For  instance  in  our  systea  AFCOM,  T1F 1,  TAF2, 
and  each  of  the  bases  '  are  the  hosts.  The  hosts  are 
connected  by  the  comaunication  subnet.  The  job  of  the  subnet 
is  tc  carry  messages  from  host  to  host.  By  separating  the 
pure  communication  aspects  of  the  network  froa  the  applica- 
tion  aspects  the  complete  network  design  is  greatly 
simplified. 

In  all  networks  the  subnet  consists  of  two  basic  ccmpo- 
nents:  switching  elements  and  transmission  lines.  The 

switching  elements  might  be  specialized  computers.  Be  will 
call  them  INPs  (interface  message  processors)  .  Transmission 
lines  are  called  circuits  or  channels 

In  figure  5.2,  each  host  is  connected  to  one  IMP.  All 
traffic  to  or  from  the  host  goes  via  its  IMP. 

Broadly  speaking  there  are  two  general  types  of  designs 
for  the  coamunication  subnet. 

1 •  i2i£tzXSz£oi£t  cfca&pels 

The  network  contains  numerous  cables  on  leased  tele¬ 
phone  lines,  each  one  connecting  a  pair  of  IMPS.  If  two  IMPS 


70 


Figure  5.2  Communication  Subnet 


that  dc  not  share  a  cable  nevertheless  wish  to  communicate 
they  must  do  this  indirectly  via  other  IMPS.  When  a  message 
is  sent  from  one  IMP  to  another  IMP  via  one  or  more  interme¬ 
diate  iMPs  the  message  is  received  at  each  intermediate  IMP, 
in  its  entirety,  stored  there  until  the  reguired  output  line 
is  free,  and  then  forwarded.  &  subnet  using  this  principle 
is  called  point-to-point  or  store-and-forward  subnet.  In  cur 
system  we  will  use  this  kind  of  communication.  Since  some 
units  need  not  to  communicate  directly  with  AFCOM  in  system 
hierarchy.  He  will  take  a  close  look  at  to  this  subject  when 
we  consider  network  topology. 


2 .  ££g§3gast  Channels 


The  second  kind  of  communication  architecture  uses 
broadcasting.  in  this  design  there  is  a  single  coaaunica- 
tion  channel  shared  by  all  IBPs.  Inherent  in  broadcast 
systea  is  that  messages  sent  by  any  IMP  are  received  by  all 
ether  Idfs.  Soaething  in  the  aessage  itself  aust  specify  for 
whoa  it  is  intended.  After  receiving  a  aessage  not  intended 
for  itself,  an  IHP  just  ignores  it.  The  aost  important  issue 
in  brcadcast  channels  is  the  lack  of  privacy.  Privacy  is  an 
iaportant  systea  aspect  in  our  design.  Thus  we  can  not  use 
broadcast  channels  in  our  design. 

0.  1ZTHCBK  TOPOLOGY 

The  goal  of  the  topological  design  is  to  achieve  a  spec¬ 
ified  performance  at  a  minimal  cost.  There  are  no  exact 
solutions  in  this  business.  Trial  and  error  plus  the 
services  of  a  large  computer  are  essential.  The  problem  is 
so  immense  that  the  only  reasonable  approach  is  to  generate 
a  potential  network  topology  and  then  see  if  it  obeys  the 
connectivity  and  delay  constraints.  If  not  generate  another 
one,  until  a  feasible  one  is  found.  In  our  system  design 
constraints  we  should  first  consider  the  interactions  among 
the  units.  Since  our  system's  nature  is  hierarchical  and 
then  we  should  first  this  at  one  side.  Then,  we  should  look 
at  the  communication  issues.  He  have  said  that  the  broadcast 
communication  is  not  suitable  due  to  lack  of  its  privacy. 
And  the  aost  iaportant  issue  is  the  design  consideration  of 
the  databases.  Since  we  have  designed  the  databases  of  the 
sub  levels  as  a  subschemas  of  the  upper  levels,  subunits 
need  not  to  communicate  directly  to  the  upaost  level.  First 
we  should  look  at  the  point-to-point  interconnection 
topology  types. 
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Figure  5.3  Possible  Topology  Types 


In  Figure  5.3  we  see  several  possible  topologies. 
Among  these  topologies  tree  structure  is  the  most  appro¬ 
priate  one  to  satisfy  our  system  constraints.  This  topology 
permits  us  to  icplement  our  network  in  a  hierarchical  way. 
In  this  structure  each  subunit  can  communicate  with  one- 
level  higher  unit.  If  this  unit  wants  to  get,  or  send  any 
information  from  or  to  higher  level  units,  it  should  do  this 
via  intermediate  levels.  For  instance  if  a  base  would  like 
to  retrieve  a  record  from  AFCOH's  database  it  should  do  this 
via  its  ordinate  TAF.  And,  also  if  TAF1  would  like  to  send  a 
message  to  TAF2,  then  it  should  send  this  message  via  AFCOH, 
then  AFCCN  can  transmit  this  message  to  TAF2.  THis  is  very 
important  in  terms  of  network  design,  because  this  will 


greatly  siaplify  the  design  of  network.  Besides  there  is  a 
great  need  to  establish  a  connection  among  the  supply  and 
maintenance  centers.  Because  the  traffic  is  very  heavy  amcng 
these  subunits ,  if  we  do  not  set  up  interface  for  these 
subunits  then  we  can  greatly  reduce  the  overall  system 
throughput.  Also  supply  and  maintenance  centers  pass  very 
burstly  information  to  each  other.  But  the  other  system 
components  will  not  have  this  big  jobs  to  be  interacted  with 
each  ether  subunits. 

E.  DIS1GB  ISSUES 

The  first  design  decision  is  the  rules  for  data 
transfer.  Oo  data  cnly  travel  in  one  direction  called 
simplex  communication,  or  can  they  travel  in  either  direc¬ 
tion,  but  not  simultaneously  called  half  duplex  communica¬ 
tion,  cr  can  they  travel  in  both  directions  at  once,  called 
full  duplex  communication?  for  our  system  half  duplex  commu¬ 
nication  is  enough.  Since,  we  have  established  an  interface 
among  the  supply  and  maintenance  centers,  this  will  reduce 
the  traffic.  Thus  the  half  duplex  communication  is 
preferable  besides  it  is  simple  and  efficient  method. 

The  protocol  must  determine  how  many  logical  channels 
the  connection  corresponds  to,  and  what  their  properties 
are.  In  our  information  network  provides  two  logical  chan¬ 
nels  per  connection  one  for  normal  data  and  one  for  urgent 
data. 

Error  control  is  an  important  issue  when  the  physical 
communication  circuits  are  not  perfect,  many  error  detecting 
and  correcting  codes  are  known,  but  both  ends  of  the  connec¬ 
tion  must  agree  on  which  one  is  being  used  (we  will  look  at 
to  this  issue  later  in  this  chapter).  In  addition  the 
receiver,  must  have  some  way  of  telling  the  sender  which 
messages  have  been  correctly  received  and  which  have  net. 


Hot  all  cobjb unications  channels  preserve  the  order  of 
the  messages  sent  on  then.  To  deal  with  a  possible  loss  of 
sequencing  the  protocol  must  make  explicit  provision  for  the 
receiver  to  allow  the  pieces  to  be  put  back  together 
properly. 

An  issue  that  occurs  frequently  is  how  to  keep  a  fast 
transaitter  from  swamping  a  slow  receiver  with  data.  Soae 
kind  of  feedback  frca  the  receiver  to  the  sender  can  be 
established  related  with  receiver's  current  situation. 

Rhen  there  are  aultiple  paths  possible  between  source 
and  destination  at  some  point  in  the  hierarchy,  a  routing 
decision  Bust  be  aade.  Also  we  will  look  at  to  this  issue 
later  in  this  chapter.  para;All  these  are  very  iaportant 
issues  related  with  the  systea's  performance.  Re  should 
consider  these  issues  very  carefully  when  we  are  designing 
our  systea. 

F.  HITRCBK  ABCHITEC TUBES 

To  reduce  the  network  design  complexity,  aost  networks 
are  organized  as  a  series  of  layers  or  levels,  each  one 
built  upcn  its  predecessor.  The  number  of  layers  the  naae 
of  each  layer  and  the  function  of  each  layer  differ  froa 
network  to  network.  However  in  all  networks  the  purpose  of 
each  layer  is  to  offer  certain  services  to  the  higher 
layers,  shielding  those  layers  froa  the  details  of  how  the 
offered  services  are  actually  iapleaented.  Layer  n  on  one 
machine  carries  on  a  conversation  with  layer  n  on  another 
■achine.  The  layers  and  convention  used  in  this  conversation 
are  collectively  known  as  the  layer  n  protocol,  as 
illustrated  in  Figure  5.4  for  a  seven  layer  network. 

In  reality  no  data  are  directly  transformed  froa  layer 
n  on  one  aachine  to  layer  n  on  another  machine  (except  in 
the  lowest  layer)  .  Instead  each  layer  passes  data  and 


control  inf ora at ion  to  the  layer  immediately  below  it,  until 
the  lowest  layer  is  reached.  At  the  lowest  layer  there  is 
physical  coaaunicaticn  with  the  other  machine  as  opposed  to 
the  virtual  communication  used  by  the  higher  levels.  In 
Figure  5.4,  virtual  communication  is  shown  in  by  dotted 
lines  and  the  physical  communication  is  shown  by  the  solid 
lines. 

Between  each  pair  of  adjacent  layers  there  is  an  inter* 
face.  The  interface  defines  which  primitive  operations  and 
services  the  lower  layer  offers  to  the  upper  one.  When  we 
decide  how  many  layers  to  include  a  network  and  what  each 
one  should  do  one  of  the  aost  important  considerations  is 
having  cleanly  defined  interfaces  between  the  layers.  Having 
cleanly  defined  interfaces  in  turn  reguires  that  each  layer 
perfora  a  specific  collection  of  well  understood  functions. 

The  set  of  layers  and  protocols  is  called  network  archi¬ 
tecture.  the  specification  of  the  architecture  must  contain 
enough  information  tc  allow  an  implementer  to  write  the 
program  for  each  layer  so  that  the  program  for  each  layer  so 
that  the  program  will  correctly  obey  the  appropriate 
protocol. 

We  will  only  consider  the  ISO  (International  standards 
organization  )  seven  layer  model.  We  will  not  look  at  the 
ether  architectures  like  ARPANET,  IBM's  SNA,  and  DEC'S 
IECNET.  Now  we  should  look  at  the  layers  of  ISO  model. 

1.  lt§  physical  layer 

The  physical  layer  is  concerned  with  transmitting 
raw  bits  over  a  communication  channel.  Typical  guestions 
here  are  how  many  volts  should  be  used  to  represent  a  1,  and 
how  many  microseconds  a  bit  occupies,  whether  transmission 
may  pcoceed  simultaneously  in  both  directions,  how  the 
initial  connection  is  established  and  how  it  is  tern  down 
when  both  sides  are  finished,  how  many  pins  the  network 
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connector  has  and  what  each  pin  is  used  for.  Re  will  use 
the  leased  telephone  lines  as  physical  connections  among  the 
hosts. 

2.  lhe  Data  Link  layer 

lhe  task  of  the  data  link  layer  is  to  take  a  raw 
transmission  facility  and  transform  it  into  a  line  that 
appears  free  of  transmission  errors  to  the  network  layer.  It 
accomplishes  this  task  done  hy  breaking  the  input  data  up 
into  data  frames,  transmitting  the  frames  sequentially  and 
processing  the  ackncwledgement  frames  sent  back  by  the 
receiver.  Since  layer  1  merely  accepts  and  transmits  a 
stream  of  bits  without  any  regard  to  meaning  or  structure, 
it  is  up  to  the  data  link  layer  to  create  and  recognize 
frame  boundaries.  This  can  be  accomplished  by  attaching 
special  bit  patterns  to  the  beginning  and  the  end  of  the 
frame. 

A  noise  burst  on  the  line  can  destroy  a  frame 
completely.  In  this  case  the  layer  2  software  on  the  source 
machine  must  retransmit  the  frame.  Another  issue  that  arises 
at  layer  2  is  how  to  keep  a  fast  transmitter  from  drowning 
a  slow  receiver  in  data.  A  mechanism  must  be  employed  to  let 
the  transmitter  know  how  much  buffer  space  the  receiver  at 
the  moment. 

3.  lhe  Network  layer 

the  network  layer  controls  the  operation  of  the 
subnet.  Amcng  other  things,  it  determines  the  chief  charac- 
teristics  of  the  the  IMF  host  interface  and  bow  packets  the 
units  of  information  exchanged  in  layer  3  are  routed  with  in 
the  subnet.  A  major  design  issue  here  is  the  division  of 
labor  between  the  INFs  and  Hosts,  in  particular  whc  should 
ensure  that  all  packets  are  correctly  received  at  their 
destinations,  and  in  the  proper  order.  Rhat  this  layer 


software  does  basically  is  accept  messages  from  the  source 
host,  convert  them  to  packets  and  see  to  it  that  the  packets 
get  directed  toward  the  destination.  A  key  design  issue  is 
bow  the  route  is  determined.  He  will  consider  this  issue 
later  in  this  chapter. 

4 .  The  Transport  Laver 

The  basic  function  of  the  transport  layer  also  known 
host-to-hcst  layer  is  to  accept  data  from  the  session  layer 
split  it  up  into  smaller  units,  if  need  be  pass  these  to  the 
network  layer,  and  ensure  that  the  pieces  all  arrive  at  the 
ether  hand. 

the  transport  layer  also  determines  what  type  of 
service  to  provide  the  session  layer,  and  ultimately  the 
users  cf  network.  The  most  popular  type  of  transport  connec¬ 
tion  is  error  free  (virtual)  point-to-point  channel  that 
delivers  message  in  the  order  in  which  they  were  sent. 

Although  the  network  architecture  specifies  nothing 
about  the  iiplementa tion,  it  is  worth  pointing  out  that  the 
transport  layer  is  often  implemented  by  a  part  of  the  host 
operating  system,  which  we  will  call  a  transport  station.  In 
contrast  the  network  layer  is  typically  implemented  in  the 
host  by  an  input/output  driver.  The  data  link  and  physical 
layers  are  normally  iiplemented  in  hardware. 

5.  I h£  Sggsiofl  la£§£ 

The  session  layer  is  the  user's  interface  into  the 
network.  It  is  with  this  layer  that  the  user  must  negotiate 
to  establish  a  connection  with  a  process  on  another 
machine.  Once  the  connection  has  been  established  the 
session  layer  can  manage  the  dialog  in  an  orderly  manner  if 
the  user  has  requested  that  service.  A  connection  between 
users  is  usually  called  session.  A  a  session  might  be  used 
to  allow  a  user  to  log  into  a  remote  time  sharing  system  or 


to  transfer  a  file  between  two  aachines.  To  establish  a 
session  the  user  must  provide  the  remote  address  he  wants  to 
connect  to.  Session  addresses  are  intended  for  use  by  users 
or  their  programs  whereas  transport  addresses  are  intended 
for  the  use  by  transport  stations,  so  the  session  layer  must 
be  able  to  convert  a  session  address  to  its  transport 
address,  to  reguest  that  a  transport  connection  be  set  up. 

6.  The  Presents  tigg  La  yer 

the  presentation  layer  performs  functions  that  are 
reguested  sufficiently  often  to  warrant  finding  a  general 
solution  for  them,  rather  than  letting  each  user  solve  the 
problems.  These  functions  can  often  be  performed  by  library 
routines  called  by  the  user. 

k  typical  example  of  a  transformation  service  that 
can  be  performed  here  is  text  compression.  The  presentation 
layer  could  be  designed  to  accept  ASCII  strings  as  input  and 
produce  compressed  bit  patterns  as  output. 

This  layer  can  also  perform  other  transf ormatiers  in 
addition  to  message  compression.  Encryption  is  one  possi¬ 
bility.  Conversion  between  character  codes,  line  and  screen 
length,  end  of  line  convention,  scroll  versus  page  mode, 
character  sets  and  cursor  addressing  are  but  a  few  of  the 
many  problems.  The  representation  layer  attempts  to 
alleviate  these  problems. 

2£e  lEElicatifia  Laier 

The  content  of  the  application  layer  is  up  to  the 
individual  user.  Nhen  two  user  programs  on  different 
aachines  communicate  they  alone  determine  the  set  of  allowed 
messages  and  the  action  taken  upon  receipt  of  each. 
Nevertheless  there  are  many  issues  that  occur  here  that  are 
guiet  general. 


It  is  generally  inadvisable  to  create  cur  cwn 
network  software.  The  job  inevitably  seems  to  take  much 
more  programming  time  than  anticipated.  A  do-it-  yourself 
approach  may  be  seen  reasonable  for  simple  point-to-point  or 
dial  telephone  lines  between  processors.  But  our  system  can 
grow  rapidly  in  a  few  years.  Thus  this  kind  of  more  complex 
forms  of  transport  network  will  need  complex  software.  These 
are  sufficiently  complex  that  a  do-it  yourself  approach  is 
not  advisable. 

A  full-function  architecture  for  distributed 
processing  from  a  given  manufacturer  should  do  everything 
listed  in  this  section.  So  we  will  look  at  only  designing 
issues  rather  than  designing  our  network  software.  £Ref.  4] 

•  MESSAGES. transactions  and  batches 

A  message  is  a  group  of  bits  sent  as  a  single  commu¬ 
nication  between  two  machines.  It  is  possible  that  for  tech¬ 
nical  reasons,  a  message  may  be  divided  into  separate  blocks 
for  transmission  (sometimes  called  packets)  .  If  that 
happens,  the  message  will  be  reassembled  before  it  is  given 
to  the  process  which  uses  it. 

A  transacticn  consists  of  the  data  which  fcrm  a 
basic  unit  of  work  for  the  application  in  question.  To 
complete  one  transaction  several  messages  may  have  tc  go 
back  and  forth. 

A  group  of  transactions  is  sometimes  sent  together 
in  one  transmission,  for  example  from  a  peripheral  processor 
used  for  data  entry.  This  is  referred  as  a  batch.  It  may 
sent  as  multiple  transmitted  blocks,  depending  on  what  block 
size  gives  the  most  efficient  transmission. 
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8 .  ling  control 


teleprocessing  needs  a  line  control  procedure  to 
perform  the  following  functions: 

1.  Indicate  start  and  end  of  a  nessage. 

2.  send  an  address  with  the  message  so  that  it  goes 
to  the  reguisite  device. 

3.  Detect  transmission  errors. 

4.  Initiate  retransaission  of  messages  in  error,  or 
messages  failed  to  arrive. 

5.  Maintain  line  discipline  to  ensure  that  two 
devices  do  not  transmit  at  once,  and  garble  each 
other*  s  isssage. 

Ihe  designer  selected  processors  to  be  interlinked 
aust  ensure  that  the?  use  exactly  coapatible  line-control 
procedures.  Some  line  control  procedures  such  as  start-stop 
control  with  with  the  CCITT  alphabet  Mo. 5 (ASCII)  [Set.  5] 
IBM's  SCIC  [Hef.  6]  is  a  subset  of  HDLC.  Most  other 
manufacturers  have  their  own  version  of  HDLC. 


9-  £SiS  SslfiSllSf 

To  communicate  the  processors  selected  aust  be  able 
to  use  not  only  the  sane  line  control  procedure  but  also  the 
same  character  set,  possibly  the  ASCII  code  or  CCITT 
Alphabet  No. 5.  If  we  buy  IBM's  products  then  we  have  to  use 
IBCCIC. 

10.  AUMfi  flSAlfl 

A  variety  of  control  information  may  be  carried  in 
the  header  of  each  message.  The  system  designer  who  has 
elected  to  use  conventional  teleprocessing  rather  than  a 
network  architecture  aust  determine  what  information  is 
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needed  in  the  message  headers.  The  following  are  some  of  the 
types  of  header  information  that  might  be  necessary: 

a.  TYPE  OF  MESSAGE 

Often  a  machine  will  receive  more  than  cne  type 
of  message.  The  header  should  be  indicate  the  type  possibly 
one  Eyte. 

b.  DESTINATION  ADDBESS 

In  our  system  message  can  travel  over  more  than 
cne  physical  links.  A  destination  address  is  needed  to  tell 
the  concentrator  or  switch  where  to  route  the  message. 

C.  SOURCE  ADDBESS 

The  receiving  processor  needs  to  know  where  a 
message  has  come  from.  If  it  has  traveled  more  than  one  link 
via  a  concentrater  or  switch,  it  must  carry  the  address  of 
its  source,  this  address  is  placed  in  any  response  messages. 

d.  MESSAGE  SERIAL  NUMBER 

The  messages  may  be  given  a  sequential  number. 
This  may  be  used  for  the  following  purposes: 

1.  For  that  no  message  is  lost. 

2.  For  associating  a  response  with  the  message 
triggering  that  response. 

3.  If  a  long  message  is  split  into  blcck  or 
packets  for  reassembling  that  message. 

4.  For  identifying  a  message  for  audit 
purposes. 

e.  TRANSACTICN  SERIAL  NUMBER 

When  several  messages  are  involved  in  one  trans¬ 
action,  the  transaction  may  be  given  a  serial  number  rather 


than  irdividual  messages.  Ibis  enables  the  transaction  to  be 
traced  and  referred  for  audit,  testing  or  retrieval 
purposes.  If  it  is  possible  for  one  message  within  a  trans¬ 
action  to  be  missing  the  message  within  a  transaction  may  be 
numbered. 


f.  CHAINING  INDICA IOE 

If  a  transaction  can  be  split  into  messages  a 
chaining  indicator  may  indicate  that  more  messages  will 
follow  in  that  transaction.  Two  bits  are  sometimes  used  in 
the  chaining  indicator,  having  the  following  meanings: 

1.  First  message  in  transaction. 

2.  Middle  message. 

3.  Last  message  in  transaction. 

4.  Only  message  in  transaction. 

g.  MESSAGE  Bf ASSEMBLY  INDICA TOB 

If  a  long  message  is  chopped  up  into  blocks  or 
packets,  sufficient  information  must  be  included  to  reas¬ 
semble  the  message  and  detect  whether  any  packet  is  lost. 
This  is  usually  dene  with  a  chaining  indicator  and 
sequential  cumber. 

b.  RESPONSE  INDICATOR 

Sometimes  when  a  processor  sends  a  message,  it 
requires  a  response;  It  may  be  programmed  to  wait  until  it 
receives  a  response.  In  this  case  it  should  send  an  indica¬ 
tion  in  the  message  saying  that  it  is  waiting.  A  2-bit 
indicator  is  sometimes  used  having  the  following  meaning: 

1.  No  response  expected. 

2.  A  response  must  be  sent  to  this  message. 

3.  A  response  must  be  sent  to  this  chain  of 
messages  after  the  last  message  in  the 
chain  is  indicated. 
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i.  TIME  &N0  EATA  STAMP 

He  need  tc  know  the  time  and  the  date  of  the 
messages  that  they  were  sent.  This  is  used  foe  reference  and 
audit  purposes.  Thus  the  messages  should  be  marked  to 
indicate  the  time  and  date  they  were  sent. 

j.  BATCH  C0H1B0LS 

In  our  system  we  usually  transmit  a  batch  of 
transactions  rather  than  individual  transactions. 
Deaarcaticn  controls  are  needed  in  the  batch  to  indicate  the 
start  and  end  of  individual  records  or  transactions  and  the 

end  of  batch.  At  the  end  of  the  batch  a  control  record 

*• 

should  be  sent  so  that  the  receiving  machine  can  check  that 
the  transactions  received  are  complete  and  accurate.  This 
control  record  may  contain  a  count  of  the  transactions  and  a 
hash  total. 

The  receiving  machine  adds  up  this  total  and 
ensures  that  it  agrees  with  the  total  written  by  the 
transmitting  machine  in  the  ccntrol  record. 

1 1 .  Ccntrol  Messages 

To  regulate  the  transfer  of  information  and  deal 
with  exception  conditions,  certain  messages  are  needed  which 
do  not  carry  application  data  but  which  are  control  signals. 
The  following  types  cf  control  messages  are  used: 

a.  BEAD!  TO  EE6IN 

One  machine  signals  to  another  that  it  is  ready 
to  receive  transmi ssicn. 


b.  NOT  READ! 


A  machine  indicates  that  it  is  not  at  the  moment 
that  it  is  ready  to  receive. 

C.  REQUEST  PERMISSION  TO  TRANSMIT 

One  machine  contacts  another,  requesting  permis¬ 
sion  to  transmit. 

d.  REJECT 

One  machine  rejects  the  transmission  from 
another,  indicating  the  reason.  The  rejection  will  not 
normally  be  due  to  a  transmission  error  because  these  are 
detected  and  dealt  with  by  the  line  control  procedure.  It 

will  be  a  validity  error  or  failure  message  of  some  type. 

« 

e.  RETRANSMISSION  REQUEST 

The  receiving  machine  request  that  a  message 
with  a  given  number  be  reseat;  or  possibly  all  messages 
after  a  given  number.  This  may  be  necessitated  by  a  machine 
or  line  failure  of  some  type. 

f.  INTERRUPT 

One  processor  may  send  an  urgent  message  to 
interrupt  another  processor. 

g.  INITIATE  SESSION 

Various  types  of  message  may  be  interchanged  to 
initiate  a  session  between  two  machines  or  to  check  that  the 
messages  have  permission  and  have  the  resources  to  communi¬ 
cate.  Security  checks  may  be  necessary  before  the  session 
can  commence. 
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12.  Co  a  cacti cd 

If  transmission  efficiency  is  a  major  concern/  data 
may  be  compressed  before  transmission.  This  can  reduce  the 
number  of  bits  by  one  third  or  one  half  [Ref.  7]  The 
compressed  message  will  be  restored  to  its  original  form  at 
the  other  end  of  the  link  before  use.  The  compression  and 
expansion  say  be  done  by  software  in  the  using  computers. 
Like  cryptography/  it  may  also  be  done  by  intelligent 
hardware  external  to  the  computer  [Ref.  1] 

G.  BCDTIIG 

The  routing  algorithm  is  that  part  of  the  network  layer 
software,  responsible  for  deciding  which  output  line  an 
incoming  packet  should  transmitted  on. 

Regardless  of  whether  routes  are  chosen  independently 
for  each  packet  or  just  at  the  start  of  new  sessions,  there 
are  certain  properties  that  are  desirable  in  a  routing  algo¬ 
rithm:  correctness,  simplicity,  robustness,  stability, 
fairness,  and  optimality. 

Once  a  network  comes  on  the  air,  it  may  be  expected  to 
run  continuously  for  years  without  system- wide  failures. 
During  that  time  there  will  be  hardware  and  software  fail¬ 
ures  of  all  kinds.  Hosts,  IHPs  and  lines  will  go  up  and 
down  repeatedly  and  the  topology  will  change  many  tines.  The 
routing  algorithm  must  be  able  to  cope  with  changes  in  the 
topology  and  traffic  without  reguiring  all  jobs  in  all  hosts 
to  be  aborted  and  the  network  to  be  rebooted  every  time  seme 
IHP  crashes. 

As  a  compromise  many  networks  attempt  to  minimize  the 
number  of  the  hops  tends  to  improve  the  delay  and  also 
reduce  the  amount  of  bandwidth  consumed,  which  tends  to 
improve  the  throughput  as  well. 
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Bcuting  algorithms  can  be  classed  into  two  classes: 
nonadaptive  and  adaptive.  Nonadaptive  algorithms  do  not  base 
their  routing  decisions  and  measurements  or  estimates  of 
the  current  topology  and  traffic  whereas  the  adaptive  ones 
do.  Adaptive  algorithms  can  further  be  subdivided  into 
centralized^  isolated/  and  distributed  £Bef.  8] 

He  will  not  here  look  at  all  routing  algorithms.  He  will 
only  lock  at  the  static  routing  which  meets  all  of  cur 
design  specifications.  Since  our  network  does  not  have  too 
many  nodes  and  static  routing  is  the  simplest  one.  Besides 
if  we  can  make  a  good  estimate  about  alternate  routes/ 
static  routing  can  be  the  most  efficient  one  for  our  system. 
Fortunately  we  have  small  number  of  nodes  which  permit  us  to 
make  a  gcod  estimation  on  alternate  routes. 

i-  s£ati£  asatijg 

Static  or  directory  routing  is  a  simple  algorithm 
and  one  of  the  most  widely  used.  Each  IMP  maintains  a  table 
with  one  row  for  each  destination  IHP.  A  row  gives  the  best, 
second  best/  third  best  and  so  on ,  outgoing  line  for  that 
destination/  together  with  a  relative  weight.  Before 
forwarding  a  packet/  an  IHP  generates  a  random  number  and 
then  chooses  among  the  alternatives/  using  the  weights  as 
probabilities.  The  tables  are  normally  worked  out  by  the 
network  operators,  loaded  into  the  IHPs  before  the  network 
is  brought  up,  and  not  changed  there  after. 

Actually  in  our  network  we  don't  have  a  big  routing 
problem.  Since  the  hosts  do  not  have  more  than  one  connec¬ 
tion  at  any  level.  Thus  if  TAF1  would  like  to  send  a  packet 
to  TAF2  there  is  only  one  route  via  AFCOH.  It  is  obvious 
that  we  don't  need  to  determine  which  route  is  better  than 
the  others.  In  futcre  if  we  make  a  lateral  connections  in 
this  network  then  we  will  have  a  serious  routing  problem.  In 
that  case  we  should  reconsider  these  routing  issues. 
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She  only  problem  with  static  routing  is  the  determi¬ 
nation  of  weights  for  each  route.  This  job  should  net  he  ad 
hoc.  1  letter  although  more  complicated  way  to  choose  the 
routes  explicitly  minimize  the  mean  packet  time  [Bef.  9] 

Static  directory  routing  can  give  good  performance 
if  the  tcpclogy  and  the  traffic  do  not  change  much.  It  also 
makes  good  use  of  existing  bandwidth  by  using  alternative 
routes. 

B.  I  fi  A 1  SHI  SSI  OS  EBBCBS 

Transmission  errors  are  the  fact  of  life.  Network 
designers  have  developed  two  basic  strategies  for  dealing 
with  errers.  One  way  is  to  include  enough  redundant  informa¬ 
tion  along  with  each  block  of  data  sent  to  enable  to  the 
receiver  to  deduce  what  the  transmitted  character  must  have 
been.  The  other  way  is  only  to  include  enough  redundancy  to 
allow  the  receiver  to  deduce  that  an  error  occured  but  not 
which  error,  and  have  it  reguest  a  transmission.  The  first 
strategy  is  error  correcting  codes,  and  second  uses  error 
detecting  codes. 

1.  Error  Correcting  Codes 

A  message  consists  of  m  message  bits,  and  r  check 
bits.  Let  the  total  length  be  n.  An  n  bit  unit  ccntaining 
data  and  check  bits  is  often  referred  to  as  an  n  bit  code¬ 
word.  The  error  detecting  and  correcting  properties  of  a 
code  depend  on  its  Hamming  distance  £Bef.  10]  The  number  of 
bit  positions  in  which  two  codewords  differ  is  called  the 
Hamming  distance  d  apart,  it  will  require  d  single-bit 
errors  to  convert  one  into  the  other.  To  detect  d  errers,  we 
need  a  distance  d+1  codeword  because  with  such  a  code  there 
is  no  way  that  d  single-bit  error  can  change  a  valid  code¬ 
word  into  another  valid  codeword.  Bhen  the  receiver  sees  an 
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invalid  codeword/  it  can  tell  that  a  transmission  error  has 
cccured.  Similarly  to  correct  d  errors  we  need  a  2d+1  code 
because  that  way  the  legal  codewords  are  so  far  apart  that 
even  with  d  changes/  the  original  codeword  is  still  closer 
than  any  other  codeword/  so  it  can  be  uniquely  determined. 

The  bits  of  the  codeword  are  numbered  consecutively 
starting  with  bit  1  at  the  left  end.  The  bits  that  are  power 
of  twc  are  checkbits.  The  rest  are  filled  up  with  the  m 
data  bits.  Each  check  bit  forces  the  parity  of  some  collec¬ 
tion  of  bits,  including  itself/  to  be  even  or  odd.  & 
message  bit  may  be  included  in  several  parity  computations. 
To  see  which  check  bits  the  data  bit  in  position  k ,  contrib¬ 
utes  the/  rewrites  k  as  the  sum  of  powers  of  2.  For  example/ 
29*1 +4+8+16 .  A  bit  is  checked  by  just  those  check  bits 

occurisg  in  its  expansion.  Rhen  a  codeword  arrives,  the 

< 

receiver  initializes  a  counter  to  zero.  It  then  examines 
each  check  bits,  k  tc  see  if  it  has  the  correct  parity.  If 
not  it  adds  k  to  the  counter.  If  the  counter  is  zero  after 
all  the  check  bits  have  been  examined,  the  codeword  is 
accepted  as  valid.  If  the  counter  is  nonzero  it  contains  the 
number  of  incorrect  tit. 

Hamming  codes  can  only  correct  single  errors. 
However  there  is  a  trick  that  can  be  used  to  permit  Hamming 
codes  to  correct  burst  errors.  A  sequence  of  k  consecutive 
codewords  are  arranged  as  a  matrix,  one  codeword  per  row. 
normally  the  data  would  be  transmitted  one  codeword  at  a 
time,  fcrm  left  to  right.  Tc  correct  burst  errors  the  data 
should  be  transmitted  one  column  at  a  time  starting  with  the 
leftmost  column.  Rhen  all  k  bits  have  been  sent,  the  second 
column  is  send  and  so  on.  Rhen  the  message  arrives  at  the 
other  side  the  matrix  is  reconstructed,  one  column  at  a 
time.  If  a  burst  error  of  length  k  occurs,  1  bit  in  each 
of  the  k  words  will  have  been  affected,  but  the  Hamming  code 
can  correct  one  error  per  codeword,  so  the  entire  block  can 
be  restored. 
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Error  correcting  codes  are  sometimes  used  for  data 
transmission,  for  example  when  the  channel  is  simplex,  so 
retransmission  can  net  be  requested,  but  most  often  error 
detection  followed  by  retransmission  is  preferred  because  it 
is  more  efficient.  In  practice  a  method  is  in  widespread 
use:  the  polynomial  code {also  known  as  cyclic  redundancy 

code  or  CSC  ).  Polynomial  codes  are  based  upon  treating  the 
bit  strings  as  representations  of  polynomials  with  coeffi¬ 
cients  of  0  and  1  only.  A  k-bit  message  is  regarded  as  the 
coefficient  for  a  polynomial  with  k  terms.  Such  a  polynomial 
is  said  to  be  of  degree  k-1.  For  example,  11000  has  five 
bits  and  thus  represents  a  five  term  polynomial  with  coef¬ 
ficients  1,  1,  0,  0,  and  0.  Polynomial  arithmetic  is  done 

module  2,  according  to  the  rules  of  algebraic  field  theory. 
There  are  no  carries  for  addition  and  no  borrows  for 
subtraction.  Both  subtraction  and  addition  identical  to 
exclusive  or. 

Nhen  the  polynomial  code  is  used,  the  sender  and 
receiver  must  agree  upon  a  generator  polynomial,  G(x)  in 
advance.  Both  the  high  and  low  order  bits  of  the  generator 
must  be  1.  To  compute  the  checksum  for  some  messages  with  a 
bits,  corresponding  to  the  polynomial  B(x)the  message  must 
be  longer  than  the  polynomial.  The  basic  idea  is  to  append  a 
checksum  to  the  end  cf  the  message  in  such  a  way  that  the 
polynomial  represented  by  the  checksummed  message  is  divi¬ 
sible  by  G  (x) .  If  there  is  a  remainder,  there  has  been  a 
transmission  error. 

The  algorithm  for  computing  the  checksum  is  as  follows: 

1.  Let  r  be  the  degree  of  G(x).  Append  r  zero  bits 
to  the  leu  order  end  of  the  message,  so  it  now 
contains  m+r  bits. 
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2.  Divide  the  string  corresponding  to  G  (x)  into  the 
bit  string  corresponding  to  r  zero  bits  appended 
message. 

3.  Subtract  the  remainder  (which  is  always  r  or 
fewer  bits  )  from  the  bit  string  corresponding 
to  r  zero  bits  appended  message,  using  modulo  2 
subtraction.  The  result  is  the  checksummed 
message  to  be  transmitted. 

I.  CBTFT010GI 

Until  the  advent  of  computers,  one  of  the  main 
constraints  on  cryptography  has  been  the  ability  of  the  code 
clerk  to  perform  the  necessary  transformations,  often  a 
battlefield  with  little  equipment.  An  additional  constraint 
has  been  difficulty  in  switching  over  quickly  one  crypt cgra- 
phyic  method  to  another  'one  since  this  entails  retaining  a 
large  number  of  people.  The  danger  of  a  code  clerk  being 
captured  by  the  enemy  has  made  it  essential  to  be  able  to 
change  the  crypt cgraphyic  method  instantly.  These 
conflicting  requirements  have  given  rise  to  the  model  of 
figure  5.5  . 

The  messages  to  be  encrypted  known  as  the  plaintext,  are 
transformed  by  a  function  that  is  parameterized  by  a  key. 
The  output  of  the  encryption  process  known  as  the  cipher- 
text,  is  then  transmitted  by  a  messenger  or  radio,  fie  assume 
that  the  enemy  or  intruder  hears  and  accurately  copies  down 
the  complete  ciphertext.  Sometimes  the  intruder  does  not 
only  listen  to  the  ccmmunication  channel  but  can  also  record 
messages  and  play  back  them  later,  inject  his  own  messages, 
or  modify  legitimate  messages  before  they  get  to  the 
receiver. 

The  key  consists  of  a  short  strings  of  characters  that 
selects  cne  of  many  potential  encryptions.  In  contrast  the 


First  and  the  oldest  cipher  known  is  the  CEASER 
cipher.  In  this  method  each  letter  is  substituted  with  a 
3-letter  shifted  one.  For  instance  a  becomes  D,  b  becomes  E 
and  so  on.  A  slight  generalization  of  this  cipher  allows  the 
ciphertext  alphabet  tc  be  shifted  by  k  letters,  instead  of 
always  3.  In  this  case  k  becomes  a  key  to  the  general  method 
of  circularly  shifted  alphabets. 

The  next  improvement  is  to  have  each  of  the  symbols 
in  the  plaintext,  say  26  letters  for  simplicity,  each  map 
onto  seme  other  letter.  For  example,  first  row  is  a 
plaintext  and  the  seccnd  row  is  ciphertext. 


abcdefghijklmnopgrstvywxyz 
stlyhopwbx  uczafcidjvemkngr 

This  general  system  is  called  monoalphabetic  substi¬ 
tution,  with  the  key  being  the  26-letter  string 
corresponding  to  the  full  alphabet. 

Given  a  surprisingly  small  amount  of  ciphertext,  the 
cipher  can  re  broken  easily.  The  basic  attacks  take  advan¬ 
tage  of  statistical  properties  of  natural  languages.  In 
english,  for  example,  e  is  the  most  common  letter,  followed 
by  t,  a,  o,  n,  i.  The  most  common  letter  combinations,  or 
digrams,  are:  th,  in,  er ,  and  an.  The  most  common  three 
letter  ccmbina tions,  cr  trigrams  are:  the,  and,  ion  and  end. 

A  cryptanalyst  trying  to  break  a  monoalphabetic 
cipher  wculd  start  oat  by  counting  the  relative  frequencies 
of  all  letters  in  the  ciphertext.  Then  he  might  tentatively 
assign -the  most  common  one  to  e  and  the  next  common  cne  to 
t.  Then  by  making  guesses  at  common  letters  digrams,  and 
trigrams,  cryptanalyst  builds  up  a  tentative  plaintext 
letter  by  letter. 

To  make  the  cryptan alyst *s  job  more  difficult,  it  is 
necessary  to  smooth  out  the  frequencies  of  the  ciphertext. 


Figure  5.5  Cryptographic  Method. 

general  method,  which  may  be  every  few  years,  the  keys  can 
he  changed  as  often  as  repaired.  Thus  our  basic  model  is  a 
stable  and  publicly  known  general  method  parameterized  by  a 

secret  and  easily  changed  key. 

Encryption  methods  historically  divided  up  into  two 
categories:  substitution  ciphers  and  transposition  ciphers. 
Mow  we  will  look  at  each  of  them. 

1  •  jMbstitution  £i£hers 

In  a  substitution  cipher  each  letter  or  group  of 
letters  is  replaced  by  another  letter  or  group  of  letters  to 
disguise  it. 
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so  the  letters  representing  e,  t,  do  not  stand  out  so 
clearly.  One  way  of  achieving  this  goal  is  to  introduce 
multiple  cipher  alphabets,  to  be  used  in  rotation,  giving 
what  is  known  as  a  polyalphabet ic  cipher.  As  an  example 
consider  the  VIGENERE  cipher.  It  consists  of  a  square  matrix 
containing  26  CEASER  alphabet.  The  first  row  called  row  A, 
is  A  £  C  . . .  X  X  Z.  The  next  row  is  called  row  B,  is  E  C  D 
E  F  ...  I  Z  A.  The  last  row,  called  row  Z,  is  Z  A  B  C  D  ... 
W  X  I . 

like  the  moncalphabetic  cipher,  this  cipher  also  has 
a  key,  but  instead  of  being  a  string  of  26  distinct  charac¬ 
ters,  the  key  is  usually  a  short,  easy-to-remember  word  or 
phrase,  such  as  EXTEE EESTRI AL. 

EXTERRESTR  IA1EXTERRESTR 

tact  icalforceswillstart 

The  key  letter  above  each  plaintext  letter  tells 
which  row  to  use  for  encryption.  The  t  is  encrypted  using 
the  CEASER  alphabet  row  E,  then  a  is  encrypted  using  the 
CEASER  alphabet  row  X,  and  so  on. 

A  more  powerful  polyalphabetic  cipher  can  be 
constructed  by  using  arbitrary  mo noalpha bet ic  ciphers  for 
the  rcws  instead  of  restricted  them  to  CEASER  ciphers.  The 
only  problem  with  this  scheme  is  that  the  26x26  square  table 
then  becomes  part  of  the  key  and  must  also  be  memorized  or 
written  down. 

The  next  step  up  in  the  complexity  for  the  cryptog¬ 
rapher  is  tc  use  a  lcnger  key  than  the  plaintext.  In  fact, 
constructing  an  unbreakable  cipher  is  easy.  First  choose  a 
random  bit  string  as  a  key.  Then  convert  the  plaintext  into 
a  bit  string  for  example  using  ASCII  representation. 
Finally  compute  the  EX-OR  of  these  two  strings,  bit  by  bit. 
The  resulting  ciphertext  cannot  be  broken,  because  every 
possible  plaintext  is  an  equally  probable  candidate.  The 
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ciphertext  gives  the  cryptanalyst  no  iaforaatioo  «t  ell.  Ze 
e  sufficiently  large  saaple  of  ciphertext,  each  letter  will 
occur  egeally  often,  an  will  every  digraa  and  every  trigraa. 

this  net  hod  is  known  as  the  one  tine  key,  has  a 
naaher  of  practical  disadvantages,  uafortanately.  To  start 
with,  the  key  can  not  be  aenosized,  so  both  sender  and 
receiver  anat  carry  a  written  copy  with  then.  Britten  keys 
are  undesirable.  Additionally  the  total  asoant  of  data  can 
be  tranaaitted  is  lixited  by  the  asoant  of  key  available.  Zf 
the  spy  strikes  it  rich  and  discovers  a  wealth  of  data,  he 
say  find  hinself  aaable  to  traasnit  it  back  to  headgaarters 
because  the  key  has  been  used  ap.  Another  pcoblea  in  the 
sensitivity  of  the  aethod  to  lest  sassages,  or  sassages  that 
arrive  in  the  wrong  order.  Zf  the  sender  and  the  receiver 
get  oat  cf  synchronization  as  to  where  in  the  key  they  are, 
they  are  in  troable. 

Substitution  ciphers  need  not  always  work  one  letter 
(or  bit)  at  a  tins,  for  ezaaple  PO Ill's  cipher  sees  26x26 
table,  like  the  vxotltlf  cipher.  The  plaintext  is  encoded 
two  characters  at  a  tine.  The  first  character  indicates  a 
row,  the  second  a  colons.  The  nanber  of  letter  paid  found  at 
the  intersection  is  the  encrypted  value.  Zf  26  different 
tables  are  prepared,  trigrnns  can  be  encrypted  as  units  by 
using  the  first  letter  of  each  trigraa  to  select  a  table. 

2.  Codes 

As  the  salts  encrypted  becoae  longer  and  longer,  the 
cipher  begins  to  reseable  a  code.  The  nain  difference 
between  a  cipher  and  a  code  is  that  the  foraer  encrypts  a 
fixed-site  salt  of  plaintext  with  each  operation,  whereas 
the  later  encrypts  a  single  variable- length  linguistic  unit, 
typically  a  single  word  or  phrase. 

Codes  have  the  disadvantage  of  regaining  large 
blocks,  that  can  not  be  replaced  as  easily  as  the  key  to  a 
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cipher.  However  they  he  re  the  advantage  of  beiog  harder  to 
break  thaa  cipher a.  Codes  and  ciphers  can  be  cosbiocd  to 
sake  the  cryptanalyst's  life  less  pleesaat.  For  exaaple, 
encoding  a  sassage  sight  yield  a  five-dijit  soakers.  These 
nosbers  coo Id  be  concatenated  to  fors  a  digit  sequence,  that 
coaid  than  be  encrypted  using  a  polya lphabe tic  cipher. 
Enciphering  a  coded  sassage  is  called  soperenciphersent. 
Soperenciphered  codes  are  harder  to  break. 

3.  KlMMllUM  Ciphers 

Substitution  ciphers  and  codes  preserve  the  order  of 
the  plaintext  bat  di again#  thes.  Transposition  ciphers,  in 
contrast,  reorder  the  letters  bat  do  not  disgaise  then. 
Figure  5.6  depicts  a  cos son  transposition  cipher,  the 
colassar  transposition.  The  cipher  is  keyed  by  a  word  of 
phrase  act  containing  any  repeated  letters.  Zn  this  exaaple 
TROUBLE  is  the  key.  lhe  purpose  of  the  key  is  to  sasber  the 
colasns,  colons  1  being  under  the  key  letter  closest  tc  the 
start  of  alphabet,  and  so  on.  The  plaintext  is  written  hori¬ 
zontally,  as  a  series  of  rows.  The  cipaertext  is  read  oat 
by  colasns,  starting  with  the  coiaan  whose  key  is  the 
lowest. 

lo  break  a  transposition  cipher,  the  cryptanalyst 
sost  first  be  aware  that  he  is  dealing  with  a  transposition 
cipher.  By  looking  at  the  fregueacy  of  e,  t,  a,  o,  i,  n,  it 
is  easy  to  see  if  they  fit  the  noraal  pattern  for  plaintext. 
If  so  the  cipher  is  clearly  the  transposition  cipher, 
because  is  such  a  cipher  every  letter  represents  itself. 

Bose  transposition  ciphers  accept  a  fixed-length 
block  of  input  and  prodace  a  fixed-length  block  of  output. 
These  ciphers  can  be  cospletely  described  by  just  giving  a 
list  telling  the  order  la  which  the  characters  are  to  be 
output. 
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Cigar  a  3.4  Traaapoaltioa  cipher. 

*'  ui  fiiu  imittk  gunflisd 

Mila  describing  the  sarloa •  classical  cryptogra¬ 
phic  sc baa as,  so  hava  triad  to  sake  it  claar  hos  coapstars 
caa  to  usad  as  poserfsl  tools  by  t ho  cryptanalyst,  both  Cor 
collactlog  Cragaaacy  statistics  asd  Cor  trying  ont  largo 
aoabars  cC  taatatisa  aolntions.  Ba  sill  think  abont  noting 
tha  ancxyption  procass  so  coaplicatad  that  not  a van  a 
coapstar  caa  braak  it. 

hlthoagh  sodara  cryptography  anas  tha  saaa  basic 
idaas  as  traditional  cryptography,  transition  and  ssbstlta- 
tion,  its  aaphasis  is  dlCCarant.  traditionally  cryptographs 
ossd  siaplo  algor  it  has  and  rallod  on  long  kays  Cor  thalr 
aacarlty  nosadayn  reterse  is  trae:  tha  object  is  to  aaka  tha 
aacryption  algor  it  ha  so  oosplas.  had  iavolotad  that  esaa  1C 
tha  cryptanalyst  acgairas  vast  noon da  o c  aacipharad  tart  oC 
his  csa  choostag,  ha  sill  aot  ba  abla  to  saka  any  aaasa  oC 
it  at  all. 
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Vigos*  5.7  I:  F-Box«  Is  S-Box.  Ct  Cases do  ciphers. 

transposition  sad  sobstitotioa  esa  bo  doao  with 
aiaplo  c ire aits.  Vigors  5.7  i#  shoos  s  dories  known  as 
f-box.  osod  to  offset  s  traaspositioa  oa  sa  8-bit  inpat.  if 
th*  8  bits  aro  dosigaatod  fros  top  to  bottoa  as  01230567. 
thoa  tbo  ootpot  of  this  pacticolar  p-box  is  36071205.  8/ 
appropriato  lstoraal  wiring  a  p-box  can  bo  sods  to  porfora 
any  t  ran*  position.  Substit  otiono  aro  par  foe  sod  by  what  as* 
called  s-boxes.  as  sbcoa  is  Vigors  5.7  8.  Za  this  oxaspl*  a 
3-bit  plaintext  is  oatorod  and  a  3-bit  ciphortoxt  is  ootpot. 
the  3-bit  ispot  selects  oao  of  the  linos  exiting  fros  the 
first  stags  and  sots  it  to  1;  all  tho  other  linos  aro  0.  tho 
socond  stags  is  a  p-box.  tho  third  stags  encodes  th* 
selected  iapot  lias  is  binary  again.  Bitb  the  wiring  shown, 
if  tho  eight  octal  aoabors  01230567  wore  iapot  oa*  after 
another,  tho  ootpot  segoeace  woold  bo  2e 506713.  Again  by 
appropriato  wiring  of  th*  p-box.  any  sobstitotioa  can  be 
accoapliahed. 

tho  seal  power  of  those  basic  eleseats  only  becoaes 
whea  we  concede  a  whole  aeries  of  ciphers.  as  shown  in 
figore  5.7  C.  In  this  exaaple.  12  iapot  lines  are  trans¬ 
ported  by  the  first  stage.  Theoretically.  it  woold  be 


poaaible  to  have  the  second  stag*  bo  aa  S- box ,  that  tapped  a 
12- bit  aoabor  oato  aacther  12-bit  aaabor.  However,  such  a 
device  would  aood  2**12  *  *096  crossed  vires  in  ita  aiddio 
atago.  laatoad  tbo  input  ia  broken  up  into  four  groups  of  3 
bits,  aacb  of  which  ia  aabatitatod  independently  of  tho 
otbora.  *1 though  tbia  ootbod  ia  loan  general,  it  ia  atill 
poworfal.  By  iaciodiag  a  aafficioatlj  largo  aaabor  of  atagoa 
ia  tbo  prod act  cipher,  tbo  oat pat  cob  bo  aado  to  a  aoaliaoar 
faactioa  of  tbo  input  {Bef.  *] 

Bo  have  talbad  about  too  aacb  on  cryptology  ao  far, 
because  of  our  aystoa  aood a  vary  tight  aocority  aoaaoroa.  it 
ia  obvious,  that  tbo  cryptology  ia  aot  only  tbo  uay  to 
prevent  aalidoua  act,  to  gaiA  accoaa  to  aocrot  iaforaatica. 
Bo  aboald  ala  o  cob  aider  tho  overall  ayatoa  aocority  and 
privacy.  But  vo  will  aot  consider  tbo a  la  tbia  thoaia,  aiaco 
tboy  aro  vary  vide  nob  joe  te  and  dopoad  oa  tbo  particular 
applicatioa. 


?X.  COST  COBSIPIHATIOBS 


i.  ritiiii mix  coisicniTzoas 

Biniconputers  have  historically  lacked  the  power  of 
aainf rases.  Their  lever  price,  however,  eade  the  systeas 
ideal  for  dedicated  teaks.  Technological  advances,  quickly 
elevated  aiaicoapateri  to  the  class  of  standalone,  general- 
purpose  eye  tees,  and  sanufacturers  began  developing  high-end 
aiaiccapnters  with  32-Bit  architectures  to  challenge 
aainfraae  aarkets. 

1.  Eeflnlpfl  needs 

The  first  task  is  purchasing  a  ainicoaputer  is  to 
develop  a  definition  of  tfee  use  for  the  nev  systen.  By 
detailing  the  envirennent  and  utilization,  an  organization 
can  quickly  detezniae  whether  or  not  a  full-powered  niniccs- 
puter  is  needed.  o«r  systea  sill  have  to  support  appro zi- 
aately  2a  interactive  users  and  provide  such  services  as 
electronic  nail,  data  base  aaaagasent,  and  advanced 
accounting  functions.  In  addition  the  systea  will  be 
required  to  perfoca  latch  updates  to  the  salafraae  several 
Uses  a  day.  Also,  we  strongly  desire  that  the  ainlcoaputers 
have  several  coaauslcatioa  capabilities  in  terns  of 
networking. 

fzaainiag  the  capabilities  of  alternate  types  of 
systeas  will  lead  this  organization  to  the  conclusion  that 
ainlcoaputers  represent  the  best  option.  The  single-user 
8-aadtd-  Bit  aicroccsputer  systeas  would  obviously  not 
satisfy  cur  systea  reguireaeats.  High-end  nicroccnputers 
could  certainly  provide  necessary  throughput,  but  this 
quickly  degrades  as  additional  users  are  added.  On  the  ether 
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and  of  the  aarket,  it  would  be  hard  to  justify  a  saiofrasa 
for  24  users. 

It  is  this  type  of  dsdicatsd  application  that  aany 
experts  fra  diet  tha  lisicoaputar  will  continue  to  fulfill. 
Biniccnputers  will  also  ba  required  for  othar  such  applica¬ 
tions  as  controlling  dusts rs  of  singla-usar  si crocosp stars, 
dedicated  coaauni  cation  switching  and  sanaging  various 
oat  wort  functions. 

2.  Throughout 

Ones  tha  application  is  defined,  oaa  should  astisata 
tha  raguirad  throughput.  Throughput  can  bast  ba  dafinad  as 
tha  systes*s  ability  to  accept,  procsss  and  output  tha 
rasults  cf  transactions,  tha  nunhar  of  transactions,  tha 
nuabur  of  usars,  and  tha  aaouat  of  data  that  is  involvad 
will  previda  a  ralativa  throughput  re*uireseat. 

lctual  throughput  is  dstarmiaad  by  a  cosbination  of 
procassing  powar,  ganarally  axprassad  in  Billions  of 
instructions  par  saccad  (BUS),  bus  transfar  ratas  and 
aaaory  eye la  tins.  Such  factors  as  tha  iatarrupt  systsa, 
operating  s eft vacs  and  tha  availability  of  eaeha  as nor y  also 
offsets  throughput,  and  any  oaa  of  thasa  alsaanta  is  capatla 
cf  distorting  tha  ovarall  pictura.  A  systan  faaturing  a  high 
laval  cf  pxccssaiag  powar,  for  axanpla  nay  provida  wnaccep- 
table  rssponsa  bacauaa  of  oparating  systaa  bottlenecks 
aacountarad  whan  several  usars  access  it  siaultanaously. 

The  ideal  systaa  a  mat  offer  tha  necessary  support 
for  lasediate  needs.  Xt  is  also  ia  porta  at  that  tha  systan 
ha  able  to  support  future  expanded  regulreaeats.  This 
support  aay  reside  in  tha  systaa  itself,  or  in  tha  fora  of 
available  upgrades. 
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3.  Jin  itquifiinta 

Sons  systeas  support  aultiple  users  through  aulti- 
I  plozud  13*232  interfaces.  Others  tty  iapleaeat  direct 

connections  for  oscb  toraiasl  using  clustered  controllers. 
Cnee  again*  the  architecture  Mill  affect  the  throughput  and 
response  tise  of  the  spates. 

Coe  should  additionally  understand  the  vendor's 
set  hod  cf  supporting  saltlple  users.  Potential  buyers 
should  deteraine  how  interrupts  are  assigned  and  activated. 
1  systea  based  oa  priority  interrupts  aay  not  provide  the 
response  that  low  priority  users  require  if  a  large 
percentage  cf  the  higher  priority  users  coaaoaly  run  CPU 
intensive  progress.  On  the  other  hand*  a  tine-slice  or 
polling  structure  aay  frustrate  users  running  long  or 
coaplicated  tasks. 

lost  ainicoapster  vendors  configure  their  systeas 
with  a  United  auaber  of  high-speed  ports  and  direct  aeaory 
access  chancels.  These  ports  can  speed  transactions  and, 
depending  on  the  application*  say  he  the  key  eleaents  of  a 
systea's  success.  lor  exaaple  an  application  requiring 
intensive  updates  to  a  disk  resident  data  base  would  benefit 
iron  such  a  high-speed  channel. 

8.  in  menu  coifiomtitxoi 

In  deteralnlag  the  application*  it  is  iaportant  to  quan¬ 
tify  the  ascent  of  data  required.  Purchasers  should  eiaalae 
such  factors  as  the  type  and  frequency  of  hard-copy  reports* 
the  aaoast  cf  data  that  will  he  stored  and  the  aethod  used 
to  backup  that  data.  The  peripherals  supporting  these  func¬ 
tions  can  seriously  degrade  the  overall  perforaance  of  the 
systea  if  chosen  iaproperly. 

Printers  should  he  selected  to  provide  both  the  speed 
and  print  quality  that  an  application  requires. 
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Ihv  aacuat  and  type  of  aaas  storage  soppoctad  cn  a 
systea  should  also  ba  coaaidarad.  All  ay at# as  support  disk 
drives#  but  they  vary  significantly  ia  tbair  capaciti as.  The 
technology  aaad  is  tia  disk  drive  can  also  ba  iaportant. 

Asctbar  alasaat  that  should  ba  axaalsad  is  tha  satbod  of 
copyiag  data  for  archival  storage.  Although  reel-tc-reel 
aagsatic  tapa  is  tla  soat  ccssoaly  usad  davica  for  this 
operation#  as  application  say  dictate  tha  isplesentation  of 
cartridge  disks  or  straasisg  tapa  drives.  Tha  recording 
spaed  of  backup  davica  and  tha  ability  to  store  tha  aedia 
off-line  are  prisary  considerations  ia  this  area. 

Coe  advsotaga  that  aisicoaputers  p reseat ly  have  over 
tier ocospu taro  is  cosauaicstioas  support.  Xapleaeatiag  a 
aiaiccspster  la  a  distributed  aetvork  raguiras  a  data  coaau- 
aicationa  liak  sad  protocol.  it  is#  therefore#  vary  lapor- 
teat  that  tha  boat  and  aiaicoaputer  ba  abla  to  talk  with 
sith  era  asctbar. 

A  ccasoa  solution  to  this  problas  is  through  raaota 
job  entry,  lost  vendors#  ia  addition  to  UK,  offer  asulatioa 
soft  vara  as  vail  as  XBfl  SIA  sad  X.2S  protocol  support. 
Several  vaadors  have  also  developed  proprietary  aetvorkiag 
protocols.  Tha  typa  of  link  that  sill  ba  established  tetveen 
tha  aaiafrasa  sad  tha  alaicoapaters  vill  depend  oa  tha 
application,  leaote  job  entry  say  ba  the  aost  affective 
approach  for  a  raaota  spates  vhich  only  updates  a  central- 
izad  data  base  at  tha  and  of  each  day.  A  spates  that  inter¬ 
acts  vith  a  host  several  tla as  a  day#  hove wr.  vill  need  to 
support  as  advanced  protocol  or  aetvork  architecture. 


C.  Ill  S0F11ABB  Q0851X0I 

Hinicoapoter  vendors  typically  provide  a  proprietary 
operating  systea#  a  aslsctioa  cf  coapilac s#  otilitias  and  a 
liaitad  aacoat  of  applications  software.  The  operating 
systaa  shoe  Id*  of  cocrse*  support  the  intended  application. 
If  t la  systaa  sill  be  supporting  transaction  processing*  it 
is  iaperatiee  that  tie  operating  systaa  support  those  tasks. 

Siailarly*  if  pregrass  are  to  be  developed  in-house*  it 
is  iaportant  that  the  systaa  sapport  languages  already  being 
used  by  the  prog raisers.  The  standard  supported  by 
languages  under  consideration  should  be  essoined  carefully. 

fi.  TBS  SIB  TICK  VICTCB 

Several  areas  of  vendor  support  seat  be  addressed  during 
the  buyisg  cycle.  The  aoat  obvious  ltea  is  aaiatenance. 
The  priai  y  concern  in  this  area  is  the  availability  and 
coat  of  a  aaiatenance  contract  as  well  as  the  location  of 
the  nearest  aaiatenance  caster#  the  scheduling  of  preventive 
aaintesaoce#  and  the  response  tiae.  One  should  also  ascer¬ 
tain  the  vendor's  policy  concerning  systeaa  configured  with 
third-party  softeare  and  peripherals. 

The  buyers  should  deteralne  a  vendor's  future  aarketiag 
plan.  if  a  vendor  is  involved  la  developing  aicrocoapoters 
to  the  eiclusioa  of  ainicoa paters*  it  is  possible  that  the 
vendor  will  eventually  vacate  the  ninicoaputer  aarket.  Such 
a  aove  could  leave  the  buyers  without  systaa  support  and 
would  severly  Halt  the  availability  of  third-party 
peripherals  and  software. 

The  vendor's  willingness  to  provide  site  planning* 
installation  and  initial  systea  generation  of  services 
should  be  studied.  These  iteas  are  critical  tc  the 
successful  inpleaeatatioa  of  a  new  systea  [lef.  11) 
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la  thio  chapter  m«  Mill  act  conaider  syntax  needs  up«* 
ratal},  iastaad  m«  Mill  present  an  aini computer  aalaction 
aodal  Mbicb  coaaidara  bar da are  and  soft  Mace  faaturaa  by 
tbair  aalgbta.  Thus  this  general  evaluation  aatbod  lata  tha 
uyer  to  aat  bia  omo  reguiresents  by  deteraining  tba  Heights 
of  aacb  factor.  Aa  evaluatin  axaapia  Mill  ba  praaaatad  for 
ear  systea,  bot  mo  caa  also  aaa  it  vhenever  mo  mo  a  Id  lika  to 
aapaad  tba  systea.  Also,  aoaa  ty pa  of  aiaicoapatars  Mill 
te  praaaatad  to  give  aa  idaa  about  tba  ayataa  coat,  aadar 
today 'a  aarketiag  coaditioaa. 

i«  a  ecm  lot  aziz  coarvTii  siiktzoi 

Evaluating  tba  aiaicoaputara  for  aalactioa  aaada  a 
aall- for aad  aval  aa  tics  aodal.  Tbia  aodal  diffara  froa  otbar 
aodala  in  a  aaaaa  that  it  addraaaaa  tba  ralaticaabipa 
tat m aaa  cbjective  aaaaaraa  (prica,  parforaaaca)  aad  sabjec- 
tiva  (pxocessor,aeaory  aixa) •  Particular  uaar  aaada  aad 
circuaataacas  coaid  ragmira  aoaa  variation  froa  tbaaa 
auggaatad  go id alia# a,  houavar,  tba  baaic  priaciplaa  and 
aatbod  a  Mbicb  an  praaaatad  offer  aaoagb  flaxibility  to 
accoaaodata  aacb  cbaagaa.  [Oaf.  12] 

f.  A  11601003  fVAlOlflOl  1 0011 

that  ia  aaadad  ia  an  evaluation  aodal  Mbicb  baa  four 
taaic  capabilities] 

1.  Tba  ability  to  traaafora  gaalitative  coaaldaratioaa 
iato  aaaarical  uaita. 

2.  Tba  ability  to  aspraaa  both  guantitative  and  gaali¬ 
tative  rating a  ia  tba  aaaa  aaita. 

3.  Tha  ability  to  allon  tba  declsloa-aaker  to  explic¬ 
itly  bia  or  bar  judgeaeat  aa  to  tba  relative  impor¬ 
tance  of  gaalitative  and  geaatitative  factore. 


4.  A  capacity  for  perforning  sensitivity  analysis  on 
the  results  cf  the  evaluation  by  the  aodel. 

The  rigorous  evaluation  aodel  (fiEH)  has  all  of  the  abcve 
capabilities.  The  acdel  expresses  quantitative  considera¬ 
tions  as  aonetary  costs,  and  transforas  the  total  cost  for 
each  feasible  alternative  into  a  score  between  zero  and  one 
(the  scores  son  to  one).  For  each  qualitative  factor,  the 
aodel  translates  noainal  ratings  into  nuaerical  scores,  and 
allows  the  decision- anker  to  express  his  view  of  the  rela¬ 
tive  iaportance  of  the  subjective  criteria  by  weighing  then 
(both  the  scores  for  each  alternative  on  each  criterion,  and 
the  associated  weighted  scores,  sub  to  one).  The  decision- 
saker  then  selects  a  weighting  schene  which  represents  his 
subjective  view  of  the  relative  iaportance  of  the  aggregate 
objective  score,  in  relation  to  the  aggregate  subjective 
score. 

The  application  cf  the  aodel  to  cosputer  systess  is 
illustrated  by  the  following  exaaple.  In  this  exasple  crit¬ 
ical  factors  narrowed  the  nuaber  of  sinicosputers  to  be 
considered  to  five,  iny  cosputer  its  price  range  (for  a 
ainiaua  configuration)  fell  outside  the  range  $80,000  to 
$150,000  was  eliminated.  The  five  qualifying  coaputers 
were: 

i*  mi  iiiiu;  swwhumi  fisU£u  aizm*  u 

1.  flultiuser-aulti  progressing 

2.  IB  bytes,  32  bits  storage  word,  32  bits  transfer 
word. 

3.  COBOL,  IASIC,  PL/1,  PASC1L,  APL,  BPG, 
Language-C,  FOBTBAB  77,  DG/L,  SWAT  available. 


a.  OS:  0BIX,  AOS/VS,  AOS/BT32 


5.  BS-232C*  IS-UA 9/422#  20/60  sA,  15-423  inter- 

fteca. 

6.  Asynchronous*  synchronous*  BSC*  BDLC*  X.  25* 
SDLC*  SI A*  BASS  XX  protocols. 

7.  Distribution:  Vendor*  Vendor  seintenence. 

8.  1983*  Ty picul  systes:  IBB  BAB*  OS  end  applica¬ 
tion  software.  Price:  $83*000- S2U0*000. 

£is  n*zll/2JS 

1.  Bultiuser-snlti  progressing 

2.  18  to  5B  bytes*  32  bits  storage  word*  32  bits 

transfer  word.  BOS  sesory*  2u  users*  virtual 

seaory. 

3.  COBOL*  BASIC*  Pl/1*  BLISS  32*  COBAL  66 
Langaage-C*  POITIAI,  DIBOL*  BACIO  assesbly  avail¬ 
able. 

U.  OS:  VAZ/VBS 

5.  BS-232C*  B3-M9/U22,  20/60  sA*  8S-U23  inter¬ 

faces. 

6.  Asynchronous*  synchronous*  I. 25*  SlA*  cdcbp 

protocols.  Coes  unications  channels:9 

7.  Distribution:  Vendor*  Vendor  aaiateaaace. 

8.  1982*  Typical  systes:  IBB  BAB*  10BB  disk,  121  BB 
fixed  disk  ter  nisei*  VAZ/VBS*  aultif unction 
cons,  ccntroller*  Price:  $28*500-$S9*s00 


Ui  SiBlmZlfl  ttfil  Mil  1 

1.  Hultiussr-aolti progressing 

2.  51 2k  to  1.5  H  bytss,  32  bit s  storage  word,  32 
bits  trsssfsr  word. 

3.  BOSFET  sssory,  80  ossrs,  virtual  sosory. 

I.  BASIC,  CCBOL,  IPG  III,  available. 

5.  OS:  CPP 

6.  IS-232,  CCZTT  V.35  interfaces.  BSC,  S01C,  SBA, 
protocol*.  CoaauBicatioB  cbaBBola:  8 

7.  Distribution:  Vsador,  on-site  aalatsaaBca, 

8.  1980  pries:  158,370  -  1110,220.  L# ass  (so.) 
S2, 803-85,092 

HIM  ClKIlH*  23MI 

1.  Suit iuser-sulti progressing 

2.  512*  to  81  bytss,  32  bits  stotags  word,  32  bits 
trsssfsr  word. 

3.  BOS  Bsaoxy,  32  sssrs,  virtual  sssory,  cacbs  2KB 

8.  COBOL,  1ASZC,  Pascal,  IPG  roiTBil,  asssably 
PL  I/O  availabls. 

5.  OS:  PtZBCS 

8.  Asyachroacus,  1. 25,  BSC,  BOLC,  X.25,  HASP, 
0PTZ  (3270)  ,1GB  saalatioa  protocols. 

Coasualcatioas  cbaaasls:32,  1  DBA  chaaasl. 

7.  pi  i  a  a  it,  mail  i  cospatibis. 
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Distribution;  Yendor#  on-si to  ssintonnnco 


9.  1980#  Typical  systes:  1HB  BAH#  161  88  disk#  75 

ips  tops.  CfiT#  16  asyac  linos#  FBX80S#  Price; 
S78#  000-1118,000 

5.  Jobs  UtomUifc  12  ft! 

1.  Bultiaser-aultiprograaaing  18  to  68  bytos#  32 
bits  storngo  word#  32  bits  trnnsfor  word. 

2.  BOS  oosory#  32-88  asors#  virtual  sosory#  cacbo 
32  KB 

3.  COBOL#  I1SZC#  PL/1#  KPO#  POITBAI#  assostly 
avallablo. 

8.  OS:  YS 

5.  BSC#  IBB  3270#  2780/3780#  3278/3277 ,Sli#  III# 

Siosoas/BSYZ  ZCL  7182  protocols. 

6.  Hi  1 6 BBT  cospatiblo. 

7.  Distribation:  Yondor#  vondor  sain tons nco. 

8.  1983#  Prico;  863,000. 

Ihirtoon  subjective  factors  woro  chooon.  Each  is 
discossod  bolov#  with  a  description  of  bow  sack  coapntor  was 
rated. 


*  1C1BSI11  Up  XU2  Both  affect  coapntor  speed  and 

perfcraaace.  The  five  coa paters  were  ranked  1  thru  5. 

•  PB0C1SS0B  General  capabilities#  address  and  instruction 
lengths#  nuaber  of  registers.  The  coaputers  were 
cca pared  two  at  a  tiae#  the  better  receiving  point  of  1. 
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*  Uifiil  mAJBI&i  the  saxiaua  aaount  of  raadoa  access 
aeaoxy  (BIB)  available  through  expansion.  Ths  nuaber  of 

RB  ears  assigned  as  scorss. 

*  ilBtl  BBBOBI  FIATP1ES  furious  features  not  included 
above.  Each  aa chine  vas  assigned  a  score  on  a  scale  of 
1  to  10. 

*  BAIIBOfl  ROBB  IB  £1  C  HA  ■  BEL  3  This  factor  will  Halt  the 
X/O  expansion.  Inch  coaputer  was  ranked  1  thru  5. 

*  BOBBIE  QC  mil  It  is  isportant  in  terns  of  systea 
availability  of  potential  user  expansion. 

*  DIRECT  ACCESS  BEBCil  The  asount  of  BIB  coning  with  the 
basic  configuration.  The  nuaber  of  KB  BIB  were  assigned 
as  scores. 

*  CHBAT1BG  SISTEB  The  aachine*s  operating  systea  affects 
ease  of  use,  and  efficient  use  of  the  hardware. 
Operating  systeas  were  coepared  two  at  a  tine  with  a 
pcint  given  to  tbe  superior  operating  systea. 

*  ABBEBBllB  A  poor  asseabler  can  liait  soae  applications. 
The  capabilities  of  the  asseabler  are  directly  related 
to  the  hardware.  A  zero  was  assigned  for  an  average  or 
aediocre  asseabler  and  a  one  vas  assigned  to  a  good 
asseabler. 

*  C^BPllEB?  The  nuaber  and  type  of  coapilersavailable  for 
that  aa chine.  Each  systea  vas  assigned  a  rank  froa  1  to 
5. 

*  BITWCB1  SOFTBABl  Based  on  availability  and  guality  a 
zero  was  assigned  to  poor  software  and  a  one  was 
assigned  to  good  software. 
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•  Uim&l  UU  WMIflgg  Cflmgflilllgl  This  factor  ratss 
tbs  hardware  that  is  included  in  tbs  sinisun  configura¬ 
tion  as  packaged  by  tbs  tana fact near •  Tbs  hardware  was 
ccapaxsd  two  at  a  tine,  with  a  point  to  tbs  bsttsr  of 
tbs  t mo . 


*  £1111  auras  Inc  lad  ss  consents,  which  were  not 
included  in  tbs  ctbsr  categories,  i  rank  of  1  to  5  was 
assigned  to  each  aacbine. 

each  possible  pair  of  tbs  above  factors  was 
cos pa red.  A  point  was  assigned  to  tbs  sore  isportant  factor 
of  each  ccaparison.  The  subjective  weights  were  then 
conpnted  by  dividing  the  points  for  each  factor  by  the  total 
naaber  of  points.  Tbs  resalted  weights  are  presented  in 
Table  1 


TABU  1 

Subjective  factor  weights 


IS 


SUBJECTIVE  F  1C  TOE 

Wordsize  and  cycle  tine 
Processor 
Heaory  expansion 
other  sundry  feat 
daxliua 
■giber  o; 

Direct 


•dry  features 

Suarer  of  channels 
users 

_ access  aesory 

Sisaa 

com:  tiers  „ 

■etwork  software  . 

Hardware  with  sinisus  configuration 
Other  features 


The  result  of  assigned  weights  in  this  Banner  was 
validated  by  ranking  the  subjective  factors. 

The  scores  for  each  coaputer  on  each  factor  were 
converted  percentages.  For  each  alternative  Table  2  gives 
the  score  and  percentage  of  subjective  factor  seasure 
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TABU  2 

Coapatatioa  cf  Subjective  Pact  or  imntm 


IJIAill 

m  o« 

ill 


gi 

i/.o 


UA 

M 

M 


um 

II; 

II 

ks 


ms 

f&j/. 

\i/.  is 

1000/. 


Ibs  obj«ctiT«  factor  costa  (OPC)  vara  coaputed  bp 
taking  tie  pries  of  ainiaaa  configuration  and  adding  five 
years  of  naintsnancs  ebargss. 

Iks  objective  factor  asasars  (OPH)  is  cospatsd  fcassd 
on  tbs  OIC.  Tbs  subjective  factor  asasars  (3  PH)  is  cospatsd 
by  snssixg  tbs  saltiplication  of  sack  factor  vsigbt  (SPR)  by 
tbs  respective  vsigbt  for  that  factor  given  to  sack 
altsrnativs. 

Ibs  prograa  tbsa  runs  a  ssnsitivity  analysis  by 
varying  Z  froa  zsro  to  1  by  .05  increaents,  whsra  I  is 
dsfinsd  as  tbs  objective  factor  decision  vsigbt.  Ibs 
folioving  foe a a la  provides  tbs  asasars  assigned  to  sack 
altsrnativs: 

HI  A  SOB  B*  Z  (CIH(I))  ♦  (1-X)  (SPH  (I)  ) 

Ibs  rssalts  of  tbis  prograa  can  be  found  in  labia  3 , 
vbsrsas  tbs  folioving  sbovs  tbs  ssnsitivity  analysis  of  tbs 
data. 

In  labls  3 ,  HAH6  received  tbs  bigbsst  subject ivs 
factor  aeasure,  folloved  by  ZBH  and  DEC.  DEC  received  tbs 
bigbest  objective  asasars,  folloved  by  IBB. 


S.ioo 


MEASURE 


d§£ 


data  eg 


— — SR ic 


Vi gar*  6.1  Subjectivity,  Objectivity  Kelatios. 


llias#  if  x  war*  zero,  on*  was  basing  his  decision 
solely  os  subjectivity,  ths  Vilfi  conputer  would  b«  salsctad. 
On  ths  othsr  sr trass,  if  X  wars  on*,  on*  was  basing  his 
dacisicn  on  th*  objactiv*  saasura,  than  tha  DEC  would  b* 
salsctad. 


figure  6.1  above  the  evaluation  of  five  different 
coaputera.  stile  x  increasing,  which  aeans  objectivity  gains 
eaphasis,  on  the  other  hand,  while  x  decreasing,  which  aeans 
subjectivity  gains  esphasis.  Thus,  one  can  Bake  his  deci- 
sion,  by  choosing  ar  x  value  which  is  related  with  its 
econoaical  cooatraints. 


VIZ.  C0ICIB3I0BS 


1.  In  oar  systes  design  considerations  it  is  obvious 
that  this  type  systea  can  not  ba  dasignad  in  ad  hoc 
fashion.  ta  naad  a  cantral  planning  which  at  least 
looks  five  years  ahead.  Because  the  systea  cost 
will  be  very  high  and  if  we  do  not  start  with  a 
detailed  planning,  we  will  have  too  nany  prebleas 
in  the  future  and  worse,  to  correct  these  errors 
say  cost  sore  than  the  original  cost  of  the  total 
spates. 

2.  Database  design  is  an  iaportant  part  of  our  overall 
systea  design.  An  inflexiable  database  will  not  let 
us  to  take  advantage  of  using  the  coaputer  power 
and  network  facilities.  Systea  expansion  aust  be 
considered  carefully.  Dtabase  back-up,  recovery  and 
integrity  procedures  are  also  very  iaportant 
issues.  Auditing  Bust  be  provided  to  integrate 
data  and  prevent  the  aalicious  accesses. 

3.  Hetwork  design  or  choosing  a  network  architecture 
aust  be  done  carefully.  Too  sany  kinds  of  incoapat- 
ible  type  of  hardware  and  software  products  exist 
in  aarketplace.  I  hen  we  add  the  dollar  factor  it 
will  be  tcugher  job  to  choose  these  products. 
Also,  networking  needs  a  capability  of  expansion 
fox  further  needs.  Thus,  it  aust  be  f leviable  and 
perait  the  organization  to  change  the  aystea 
configuration,  adding  new  users  and  so  forth. 

4.  The  actual  ccst  of  the  systea  is  very  difficult  to 
deteraine.  The  cost  of  uinicoaputers  are  fluctu¬ 
ating  and  aany  new  products  are  cosing  in  to  the 
aarketplace.  Dollar  consideration  has  tc  be 
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balanced  with  the  systea  needs,  it  shouldn't  be 
considered  as  aajcr  factor.  Since,  the  systes's 
further  benefits  say  balance  costs.  A  structured 
systea  cost  evaluation  aethodology  Bust  be  kept 
during  the  selection  process. 

5.  There  are  potentially  large  costs  involved  in 
training  users  and  aaintaining  software,  lew  systea 
will  reguire  a  group  of  prograsser,  analysts,  to 
process  software,  trouble  reports  tests  and 
changes,  and  saistain  systea  docunentation. 
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